Alerts and checks for nameserver disagreements

When your domain’s authoritative nameservers return different DMARC records, for example because a secondary DNS provider is out of sync, receivers may apply different policies depending on which nameserver they query.

DMARCwise now flags this situation, for both DMARC and TLSRPT records, with two new checks, and the DMARC record health and TLSRPT record health alerts are now opened when nameservers disagree.

To find out which nameserver is out of sync, open DNS details in the DMARC record history or in the TLSRPT record history.