[{"data":1,"prerenderedAt":916},["ShallowReactive",2],{"blog-fr-spf-dkim-dmarc-configuration":3,"blog-related-fr-spf-dkim-dmarc-configuration":903},{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"date":10,"updated":10,"body":11,"_type":897,"_id":898,"_source":899,"_file":900,"_stem":901,"_extension":902},"/fr/blog/spf-dkim-dmarc-configuration","blog",false,"","SPF, DKIM, DMARC : configurer son domaine","Apprenez à configurer SPF, DKIM et DMARC enregistrement par enregistrement, évitez les erreurs classiques et protégez la délivrabilité de vos emails.","2026-08-27",{"type":12,"children":13,"toc":877},"root",[14,22,29,45,59,73,86,92,99,113,118,127,132,178,183,191,213,219,239,252,272,278,284,289,297,302,310,346,359,365,410,415,421,427,440,448,461,497,510,516,534,553,581,587,592,630,635,643,686,692,754,774,788,794],{"type":15,"tag":16,"props":17,"children":18},"element","p",{},[19],{"type":20,"value":21},"text","Sans SPF, DKIM et DMARC en place, vos emails quittent votre serveur sans aucune preuve d'identité : les filtres antispam les traitent avec méfiance, et les grands opérateurs de messagerie peuvent les rejeter avant même que vous ne le sachiez. Ces trois enregistrements DNS forment un système d'authentification complémentaire que vous pouvez configurer vous-même en moins d'une heure.",{"type":15,"tag":23,"props":24,"children":26},"h2",{"id":25},"comprendre-le-rôle-de-chaque-protocole-avant-de-toucher-au-dns",[27],{"type":20,"value":28},"Comprendre le rôle de chaque protocole avant de toucher au DNS",{"type":15,"tag":16,"props":30,"children":31},{},[32,34,43],{"type":20,"value":33},"SPF (Sender Policy Framework, ",{"type":15,"tag":35,"props":36,"children":40},"a",{"href":37,"rel":38},"https://datatracker.ietf.org/doc/html/rfc7208",[39],"nofollow",[41],{"type":20,"value":42},"RFC 7208",{"type":20,"value":44},") répond à une seule question : quels serveurs sont autorisés à envoyer des emails au nom de mon domaine ? C'est un enregistrement TXT dans votre zone DNS qui liste les adresses IP ou services légitimes.",{"type":15,"tag":16,"props":46,"children":47},{},[48,50,57],{"type":20,"value":49},"DKIM (DomainKeys Identified Mail, ",{"type":15,"tag":35,"props":51,"children":54},{"href":52,"rel":53},"https://datatracker.ietf.org/doc/html/rfc6376",[39],[55],{"type":20,"value":56},"RFC 6376",{"type":20,"value":58},") ajoute une signature cryptographique à chaque message. Le serveur récepteur vérifie cette signature en consultant la clé publique publiée dans votre DNS. Si la signature ne correspond pas, le message est suspect.",{"type":15,"tag":16,"props":60,"children":61},{},[62,64,71],{"type":20,"value":63},"DMARC (Domain-based Message Authentication, Reporting, and Conformance, ",{"type":15,"tag":35,"props":65,"children":68},{"href":66,"rel":67},"https://datatracker.ietf.org/doc/html/rfc7489",[39],[69],{"type":20,"value":70},"RFC 7489",{"type":20,"value":72},") coordonne les deux précédents et indique au serveur récepteur ce qu'il doit faire quand un email échoue à SPF ou DKIM : l'accepter, le mettre en quarantaine ou le rejeter. Il produit aussi des rapports quotidiens que vous recevez par email.",{"type":15,"tag":16,"props":74,"children":75},{},[76,78,84],{"type":20,"value":77},"Ces trois protocoles sont devenus obligatoires pour les expéditeurs de masse depuis début 2024. Si vous utilisez Fluenzr pour vos séquences de prospection, les ",{"type":15,"tag":35,"props":79,"children":81},{"href":80},"/blog/exigences-google-yahoo-expediteurs",[82],{"type":20,"value":83},"exigences des grands opérateurs de messagerie",{"type":20,"value":85}," s'appliquent directement à votre domaine d'envoi.",{"type":15,"tag":23,"props":87,"children":89},{"id":88},"spf-publier-la-liste-des-serveurs-autorisés",[90],{"type":20,"value":91},"SPF : publier la liste des serveurs autorisés",{"type":15,"tag":93,"props":94,"children":96},"h3",{"id":95},"la-structure-dun-enregistrement-spf",[97],{"type":20,"value":98},"La structure d'un enregistrement SPF",{"type":15,"tag":16,"props":100,"children":101},{},[102,104,111],{"type":20,"value":103},"Un enregistrement SPF est un enregistrement de type TXT associé à votre domaine racine (",{"type":15,"tag":105,"props":106,"children":108},"code",{"className":107},[],[109],{"type":20,"value":110},"exemple.com",{"type":20,"value":112},"). Sa syntaxe suit des règles strictes définies dans la RFC 7208.",{"type":15,"tag":16,"props":114,"children":115},{},[116],{"type":20,"value":117},"Exemple minimal pour un domaine qui envoie via un SMTP externe :",{"type":15,"tag":119,"props":120,"children":122},"pre",{"code":121},"v=spf1 include:_spf.votre-provider.com ~all\n",[123],{"type":15,"tag":105,"props":124,"children":125},{"__ignoreMap":7},[126],{"type":20,"value":121},{"type":15,"tag":16,"props":128,"children":129},{},[130],{"type":20,"value":131},"Décortiquons chaque élément :",{"type":15,"tag":133,"props":134,"children":135},"ul",{},[136,148,159],{"type":15,"tag":137,"props":138,"children":139},"li",{},[140,146],{"type":15,"tag":105,"props":141,"children":143},{"className":142},[],[144],{"type":20,"value":145},"v=spf1",{"type":20,"value":147}," : version du protocole, toujours présente en premier.",{"type":15,"tag":137,"props":149,"children":150},{},[151,157],{"type":15,"tag":105,"props":152,"children":154},{"className":153},[],[155],{"type":20,"value":156},"include:_spf.votre-provider.com",{"type":20,"value":158}," : délègue la liste des IP autorisées au DNS de votre fournisseur SMTP (OVH, Infomaniak, etc.).",{"type":15,"tag":137,"props":160,"children":161},{},[162,168,170,176],{"type":15,"tag":105,"props":163,"children":165},{"className":164},[],[166],{"type":20,"value":167},"~all",{"type":20,"value":169}," : les emails provenant d'autres serveurs sont marqués comme suspects (softfail). Remplacer par ",{"type":15,"tag":105,"props":171,"children":173},{"className":172},[],[174],{"type":20,"value":175},"-all",{"type":20,"value":177}," les rejette franchement (hardfail).",{"type":15,"tag":16,"props":179,"children":180},{},[181],{"type":20,"value":182},"Si vous envoyez depuis plusieurs services, tous les mécanismes doivent figurer dans le même et unique enregistrement :",{"type":15,"tag":119,"props":184,"children":186},{"code":185},"v=spf1 include:_spf.votre-provider.com include:_spf.google.com include:spf.protection.outlook.com ~all\n",[187],{"type":15,"tag":105,"props":188,"children":189},{"__ignoreMap":7},[190],{"type":20,"value":185},{"type":15,"tag":16,"props":192,"children":193},{},[194,196,203,205,211],{"type":20,"value":195},"La ",{"type":15,"tag":35,"props":197,"children":200},{"href":198,"rel":199},"https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/email-authentication-spf-configure",[39],[201],{"type":20,"value":202},"documentation Microsoft sur la configuration SPF",{"type":20,"value":204}," précise les mécanismes ",{"type":15,"tag":105,"props":206,"children":208},{"className":207},[],[209],{"type":20,"value":210},"include",{"type":20,"value":212}," à utiliser selon votre service d'envoi.",{"type":15,"tag":93,"props":214,"children":216},{"id":215},"lerreur-classique-le-double-enregistrement-spf",[217],{"type":20,"value":218},"L'erreur classique : le double enregistrement SPF",{"type":15,"tag":16,"props":220,"children":221},{},[222,224,230,232,237],{"type":20,"value":223},"Un domaine ne peut contenir ",{"type":15,"tag":225,"props":226,"children":227},"strong",{},[228],{"type":20,"value":229},"qu'un seul",{"type":20,"value":231}," enregistrement SPF. Si vous en créez un second lors d'un changement de provider sans supprimer l'ancien, les serveurs récepteurs se trouvent face à deux enregistrements TXT ",{"type":15,"tag":105,"props":233,"children":235},{"className":234},[],[236],{"type":20,"value":145},{"type":20,"value":238}," contradictoires.",{"type":15,"tag":16,"props":240,"children":241},{},[242,244,250],{"type":20,"value":243},"La RFC 7208 est explicite : la présence de plusieurs enregistrements SPF produit un résultat ",{"type":15,"tag":105,"props":245,"children":247},{"className":246},[],[248],{"type":20,"value":249},"permerror",{"type":20,"value":251},", ce qui revient à n'avoir aucun SPF valide du tout.",{"type":15,"tag":16,"props":253,"children":254},{},[255,257,263,265,270],{"type":20,"value":256},"Pour vérifier, interrogez votre DNS avec la commande ",{"type":15,"tag":105,"props":258,"children":260},{"className":259},[],[261],{"type":20,"value":262},"dig TXT exemple.com",{"type":20,"value":264}," ou un outil de vérification en ligne. Si deux lignes contenant ",{"type":15,"tag":105,"props":266,"children":268},{"className":267},[],[269],{"type":20,"value":145},{"type":20,"value":271}," apparaissent, fusionnez-les en une seule avant de poursuivre.",{"type":15,"tag":23,"props":273,"children":275},{"id":274},"dkim-signer-cryptographiquement-chaque-email",[276],{"type":20,"value":277},"DKIM : signer cryptographiquement chaque email",{"type":15,"tag":93,"props":279,"children":281},{"id":280},"générer-et-publier-la-clé-publique",[282],{"type":20,"value":283},"Générer et publier la clé publique",{"type":15,"tag":16,"props":285,"children":286},{},[287],{"type":20,"value":288},"DKIM repose sur une paire de clés asymétriques. Votre serveur d'envoi conserve la clé privée et s'en sert pour signer chaque message. Vous publiez la clé publique dans votre DNS sous un sous-domaine spécifique appelé sélecteur, au format :",{"type":15,"tag":119,"props":290,"children":292},{"code":291},"\u003Csélecteur>._domainkey.exemple.com\n",[293],{"type":15,"tag":105,"props":294,"children":295},{"__ignoreMap":7},[296],{"type":20,"value":291},{"type":15,"tag":16,"props":298,"children":299},{},[300],{"type":20,"value":301},"Exemple d'enregistrement DKIM de type TXT :",{"type":15,"tag":119,"props":303,"children":305},{"code":304},"v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQ...\n",[306],{"type":15,"tag":105,"props":307,"children":308},{"__ignoreMap":7},[309],{"type":20,"value":304},{"type":15,"tag":133,"props":311,"children":312},{},[313,324,335],{"type":15,"tag":137,"props":314,"children":315},{},[316,322],{"type":15,"tag":105,"props":317,"children":319},{"className":318},[],[320],{"type":20,"value":321},"v=DKIM1",{"type":20,"value":323}," : version du protocole.",{"type":15,"tag":137,"props":325,"children":326},{},[327,333],{"type":15,"tag":105,"props":328,"children":330},{"className":329},[],[331],{"type":20,"value":332},"k=rsa",{"type":20,"value":334}," : algorithme de chiffrement (des clés RSA de 2048 bits sont recommandées).",{"type":15,"tag":137,"props":336,"children":337},{},[338,344],{"type":15,"tag":105,"props":339,"children":341},{"className":340},[],[342],{"type":20,"value":343},"p=...",{"type":20,"value":345}," : la clé publique encodée en base64.",{"type":15,"tag":16,"props":347,"children":348},{},[349,351,357],{"type":20,"value":350},"La procédure de génération dépend de votre outil d'envoi. La plupart des providers SMTP fournissent directement l'enregistrement à copier-coller dans votre gestionnaire DNS. Pour les configurations SMTP avec OVH ou Infomaniak, la ",{"type":15,"tag":35,"props":352,"children":354},{"href":353},"/blog/delivrabilite-smtp-ovh-infomaniak",[355],{"type":20,"value":356},"mise en place de la délivrabilité SMTP",{"type":20,"value":358}," détaille les étapes propres à ces providers.",{"type":15,"tag":93,"props":360,"children":362},{"id":361},"vérifier-que-la-signature-est-active",[363],{"type":20,"value":364},"Vérifier que la signature est active",{"type":15,"tag":16,"props":366,"children":367},{},[368,370,376,378,384,386,392,394,400,402,408],{"type":20,"value":369},"Après avoir publié la clé, envoyez un email test et examinez les en-têtes du message reçu. Cherchez l'en-tête ",{"type":15,"tag":105,"props":371,"children":373},{"className":372},[],[374],{"type":20,"value":375},"DKIM-Signature",{"type":20,"value":377}," côté expéditeur, et la ligne ",{"type":15,"tag":105,"props":379,"children":381},{"className":380},[],[382],{"type":20,"value":383},"dkim=pass",{"type":20,"value":385}," dans ",{"type":15,"tag":105,"props":387,"children":389},{"className":388},[],[390],{"type":20,"value":391},"Authentication-Results",{"type":20,"value":393}," côté récepteur. Si vous voyez ",{"type":15,"tag":105,"props":395,"children":397},{"className":396},[],[398],{"type":20,"value":399},"dkim=fail",{"type":20,"value":401}," ou ",{"type":15,"tag":105,"props":403,"children":405},{"className":404},[],[406],{"type":20,"value":407},"dkim=none",{"type":20,"value":409},", la clé n'est pas encore propagée ou le sélecteur est mal configuré.",{"type":15,"tag":16,"props":411,"children":412},{},[413],{"type":20,"value":414},"La propagation DNS peut prendre de quelques minutes à 48 heures selon votre registrar. Attendez avant de conclure à une erreur de configuration.",{"type":15,"tag":23,"props":416,"children":418},{"id":417},"dmarc-définir-la-politique-et-activer-les-rapports",[419],{"type":20,"value":420},"DMARC : définir la politique et activer les rapports",{"type":15,"tag":93,"props":422,"children":424},{"id":423},"les-trois-politiques-disponibles",[425],{"type":20,"value":426},"Les trois politiques disponibles",{"type":15,"tag":16,"props":428,"children":429},{},[430,432,438],{"type":20,"value":431},"DMARC s'ajoute comme enregistrement TXT sur le sous-domaine ",{"type":15,"tag":105,"props":433,"children":435},{"className":434},[],[436],{"type":20,"value":437},"_dmarc.exemple.com",{"type":20,"value":439},". Sa structure de base :",{"type":15,"tag":119,"props":441,"children":443},{"code":442},"v=DMARC1; p=none; rua=mailto:dmarc-reports@exemple.com\n",[444],{"type":15,"tag":105,"props":445,"children":446},{"__ignoreMap":7},[447],{"type":20,"value":442},{"type":15,"tag":16,"props":449,"children":450},{},[451,453,459],{"type":20,"value":452},"Les trois valeurs possibles pour ",{"type":15,"tag":105,"props":454,"children":456},{"className":455},[],[457],{"type":20,"value":458},"p=",{"type":20,"value":460}," :",{"type":15,"tag":133,"props":462,"children":463},{},[464,475,486],{"type":15,"tag":137,"props":465,"children":466},{},[467,473],{"type":15,"tag":105,"props":468,"children":470},{"className":469},[],[471],{"type":20,"value":472},"none",{"type":20,"value":474}," : aucune action sur les messages, mais les rapports sont générés. Sert à observer sans rien bloquer.",{"type":15,"tag":137,"props":476,"children":477},{},[478,484],{"type":15,"tag":105,"props":479,"children":481},{"className":480},[],[482],{"type":20,"value":483},"quarantine",{"type":20,"value":485}," : les emails qui échouent à DMARC sont envoyés en dossier spam.",{"type":15,"tag":137,"props":487,"children":488},{},[489,495],{"type":15,"tag":105,"props":490,"children":492},{"className":491},[],[493],{"type":20,"value":494},"reject",{"type":20,"value":496}," : les emails qui échouent sont refusés et jamais délivrés.",{"type":15,"tag":16,"props":498,"children":499},{},[500,502,508],{"type":20,"value":501},"Le tag ",{"type":15,"tag":105,"props":503,"children":505},{"className":504},[],[506],{"type":20,"value":507},"rua",{"type":20,"value":509}," définit l'adresse qui recevra les rapports agrégés quotidiens au format XML. Ces rapports indiquent quels serveurs envoient en votre nom et si vos signatures SPF/DKIM sont valides.",{"type":15,"tag":93,"props":511,"children":513},{"id":512},"lerreur-classique-rester-bloqué-en-pnone",[514],{"type":20,"value":515},"L'erreur classique : rester bloqué en p=none",{"type":15,"tag":16,"props":517,"children":518},{},[519,525,527,532],{"type":15,"tag":105,"props":520,"children":522},{"className":521},[],[523],{"type":20,"value":524},"p=none",{"type":20,"value":526}," est la bonne valeur pour commencer : vous observez les rapports sans risquer de bloquer des emails légitimes. Mais beaucoup d'expéditeurs configurent DMARC en ",{"type":15,"tag":105,"props":528,"children":530},{"className":529},[],[531],{"type":20,"value":524},{"type":20,"value":533}," et ne l'élèvent jamais, croyant que c'est suffisant.",{"type":15,"tag":16,"props":535,"children":536},{},[537,539,544,546,551],{"type":20,"value":538},"Ce n'est pas suffisant pour deux raisons. D'abord, ",{"type":15,"tag":105,"props":540,"children":542},{"className":541},[],[543],{"type":20,"value":524},{"type":20,"value":545}," n'offre aucune protection contre l'usurpation de votre domaine (phishing, spoofing). Ensuite, certains opérateurs considèrent qu'un DMARC en ",{"type":15,"tag":105,"props":547,"children":549},{"className":548},[],[550],{"type":20,"value":524},{"type":20,"value":552}," est équivalent à l'absence de DMARC pour leur niveau d'exigence.",{"type":15,"tag":16,"props":554,"children":555},{},[556,558,563,565,571,573,579],{"type":20,"value":557},"La démarche recommandée : démarrez en ",{"type":15,"tag":105,"props":559,"children":561},{"className":560},[],[562],{"type":20,"value":524},{"type":20,"value":564},", analysez les rapports pendant deux à quatre semaines, corrigez les sources légitimes qui échouent, puis passez à ",{"type":15,"tag":105,"props":566,"children":568},{"className":567},[],[569],{"type":20,"value":570},"p=quarantine",{"type":20,"value":572},", et enfin à ",{"type":15,"tag":105,"props":574,"children":576},{"className":575},[],[577],{"type":20,"value":578},"p=reject",{"type":20,"value":580}," une fois que vous êtes certain que tous vos flux d'envoi passent SPF ou DKIM.",{"type":15,"tag":93,"props":582,"children":584},{"id":583},"affiner-avec-pct-et-sp",[585],{"type":20,"value":586},"Affiner avec pct et sp",{"type":15,"tag":16,"props":588,"children":589},{},[590],{"type":20,"value":591},"Deux tags optionnels permettent d'affiner progressivement la politique :",{"type":15,"tag":133,"props":593,"children":594},{},[595,619],{"type":15,"tag":137,"props":596,"children":597},{},[598,604,606,611,612,617],{"type":15,"tag":105,"props":599,"children":601},{"className":600},[],[602],{"type":20,"value":603},"pct=50",{"type":20,"value":605}," : applique la politique uniquement à 50 % des messages concernés. Utile pour tester ",{"type":15,"tag":105,"props":607,"children":609},{"className":608},[],[610],{"type":20,"value":483},{"type":20,"value":401},{"type":15,"tag":105,"props":613,"children":615},{"className":614},[],[616],{"type":20,"value":494},{"type":20,"value":618}," sans basculer d'un coup.",{"type":15,"tag":137,"props":620,"children":621},{},[622,628],{"type":15,"tag":105,"props":623,"children":625},{"className":624},[],[626],{"type":20,"value":627},"sp=reject",{"type":20,"value":629}," : définit une politique distincte pour les sous-domaines.",{"type":15,"tag":16,"props":631,"children":632},{},[633],{"type":20,"value":634},"Un enregistrement DMARC plus complet ressemble à ceci :",{"type":15,"tag":119,"props":636,"children":638},{"code":637},"v=DMARC1; p=quarantine; pct=100; rua=mailto:dmarc@exemple.com; sp=reject; adkim=s; aspf=s\n",[639],{"type":15,"tag":105,"props":640,"children":641},{"__ignoreMap":7},[642],{"type":20,"value":637},{"type":15,"tag":16,"props":644,"children":645},{},[646,652,654,660,662,668,670,676,678,684],{"type":15,"tag":105,"props":647,"children":649},{"className":648},[],[650],{"type":20,"value":651},"adkim=s",{"type":20,"value":653}," et ",{"type":15,"tag":105,"props":655,"children":657},{"className":656},[],[658],{"type":20,"value":659},"aspf=s",{"type":20,"value":661}," imposent un alignement strict : le domaine dans la signature DKIM ou le ",{"type":15,"tag":105,"props":663,"children":665},{"className":664},[],[666],{"type":20,"value":667},"Return-Path",{"type":20,"value":669}," SPF doit correspondre exactement au domaine visible dans l'en-tête ",{"type":15,"tag":105,"props":671,"children":673},{"className":672},[],[674],{"type":20,"value":675},"From",{"type":20,"value":677},". En mode ",{"type":15,"tag":105,"props":679,"children":681},{"className":680},[],[682],{"type":20,"value":683},"r",{"type":20,"value":685}," (relaxed, valeur par défaut), un sous-domaine suffit.",{"type":15,"tag":23,"props":687,"children":689},{"id":688},"ordre-de-mise-en-place-recommandé",[690],{"type":20,"value":691},"Ordre de mise en place recommandé",{"type":15,"tag":693,"props":694,"children":695},"ol",{},[696,713,723],{"type":15,"tag":137,"props":697,"children":698},{},[699,704,706,711],{"type":15,"tag":225,"props":700,"children":701},{},[702],{"type":20,"value":703},"SPF en premier.",{"type":20,"value":705}," Vérifiez l'absence de double enregistrement, publiez un seul enregistrement consolidé avec ",{"type":15,"tag":105,"props":707,"children":709},{"className":708},[],[710],{"type":20,"value":167},{"type":20,"value":712},".",{"type":15,"tag":137,"props":714,"children":715},{},[716,721],{"type":15,"tag":225,"props":717,"children":718},{},[719],{"type":20,"value":720},"DKIM ensuite.",{"type":20,"value":722}," Générez la paire de clés via votre provider, publiez la clé publique dans le DNS, vérifiez la signature sur un email test.",{"type":15,"tag":137,"props":724,"children":725},{},[726,731,733,738,740,745,747,752],{"type":15,"tag":225,"props":727,"children":728},{},[729],{"type":20,"value":730},"DMARC en dernier.",{"type":20,"value":732}," Commencez avec ",{"type":15,"tag":105,"props":734,"children":736},{"className":735},[],[737],{"type":20,"value":524},{"type":20,"value":739}," et un tag ",{"type":15,"tag":105,"props":741,"children":743},{"className":742},[],[744],{"type":20,"value":507},{"type":20,"value":746}," actif, laissez les rapports arriver pendant deux à quatre semaines, progressez vers ",{"type":15,"tag":105,"props":748,"children":750},{"className":749},[],[751],{"type":20,"value":578},{"type":20,"value":753}," quand votre configuration est stable.",{"type":15,"tag":16,"props":755,"children":756},{},[757,759,764,766,772],{"type":20,"value":758},"Cette progression protège vos emails légitimes pendant la phase de rodage. Passer directement à ",{"type":15,"tag":105,"props":760,"children":762},{"className":761},[],[763],{"type":20,"value":578},{"type":20,"value":765}," sans avoir validé SPF et DKIM peut couper la délivrabilité de vos propres messages. Si vous démarrez sur un nouveau domaine, un ",{"type":15,"tag":35,"props":767,"children":769},{"href":768},"/guides/email-warming/",[770],{"type":20,"value":771},"échauffement progressif de votre boîte",{"type":20,"value":773}," en parallèle de ces configurations limite encore davantage les risques de blocage.",{"type":15,"tag":16,"props":775,"children":776},{},[777,779,786],{"type":20,"value":778},"Une fois votre trio SPF/DKIM/DMARC opérationnel, vous pouvez lancer vos séquences de cold email avec une base technique solide. ",{"type":15,"tag":35,"props":780,"children":783},{"href":781,"rel":782},"https://app.fluenzr.co/signup",[39],[784],{"type":20,"value":785},"Créez un compte gratuit sur Fluenzr",{"type":20,"value":787}," pour tester l'envoi depuis votre domaine correctement authentifié. Les 50 premiers abonnés payants bénéficient de 50 % de réduction à vie avec le code FOUNDING50.",{"type":15,"tag":23,"props":789,"children":791},{"id":790},"à-retenir",[792],{"type":20,"value":793},"À retenir",{"type":15,"tag":133,"props":795,"children":796},{},[797,802,814,827,853,865],{"type":15,"tag":137,"props":798,"children":799},{},[800],{"type":20,"value":801},"SPF, DKIM et DMARC sont trois enregistrements DNS distincts qui se complètent : ne configurez pas l'un sans les deux autres.",{"type":15,"tag":137,"props":803,"children":804},{},[805,807,812],{"type":20,"value":806},"Un domaine ne peut contenir qu'un seul enregistrement SPF de type TXT ; un double enregistrement produit une erreur fatale (",{"type":15,"tag":105,"props":808,"children":810},{"className":809},[],[811],{"type":20,"value":249},{"type":20,"value":813},") qui invalide les deux.",{"type":15,"tag":137,"props":815,"children":816},{},[817,819,825],{"type":20,"value":818},"DKIM repose sur une clé publique publiée dans le DNS sous ",{"type":15,"tag":105,"props":820,"children":822},{"className":821},[],[823],{"type":20,"value":824},"\u003Csélecteur>._domainkey.votre-domaine.com",{"type":20,"value":826}," ; vérifiez la signature effective sur un email test avant de considérer la configuration terminée.",{"type":15,"tag":137,"props":828,"children":829},{},[830,832,837,839,844,846,851],{"type":20,"value":831},"DMARC se configure d'abord en ",{"type":15,"tag":105,"props":833,"children":835},{"className":834},[],[836],{"type":20,"value":524},{"type":20,"value":838}," pour collecter les rapports, puis en ",{"type":15,"tag":105,"props":840,"children":842},{"className":841},[],[843],{"type":20,"value":570},{"type":20,"value":845},", puis ",{"type":15,"tag":105,"props":847,"children":849},{"className":848},[],[850],{"type":20,"value":578},{"type":20,"value":852}," une fois tous les flux d'envoi légitimes couverts.",{"type":15,"tag":137,"props":854,"children":855},{},[856,858,863],{"type":20,"value":857},"Les rapports agrégés (tag ",{"type":15,"tag":105,"props":859,"children":861},{"className":860},[],[862],{"type":20,"value":507},{"type":20,"value":864},") sont indispensables pour identifier les serveurs qui envoient en votre nom sans votre accord.",{"type":15,"tag":137,"props":866,"children":867},{},[868,870,875],{"type":20,"value":869},"Rester bloqué en ",{"type":15,"tag":105,"props":871,"children":873},{"className":872},[],[874],{"type":20,"value":524},{"type":20,"value":876}," ne protège ni contre le phishing ni contre les exigences croissantes des opérateurs de messagerie.",{"title":7,"searchDepth":878,"depth":878,"links":879},3,[880,882,886,890,895,896],{"id":25,"depth":881,"text":28},2,{"id":88,"depth":881,"text":91,"children":883},[884,885],{"id":95,"depth":878,"text":98},{"id":215,"depth":878,"text":218},{"id":274,"depth":881,"text":277,"children":887},[888,889],{"id":280,"depth":878,"text":283},{"id":361,"depth":878,"text":364},{"id":417,"depth":881,"text":420,"children":891},[892,893,894],{"id":423,"depth":878,"text":426},{"id":512,"depth":878,"text":515},{"id":583,"depth":878,"text":586},{"id":688,"depth":881,"text":691},{"id":790,"depth":881,"text":793},"markdown","content:fr:blog:spf-dkim-dmarc-configuration.md","content","fr/blog/spf-dkim-dmarc-configuration.md","fr/blog/spf-dkim-dmarc-configuration","md",[904,909,913],{"_path":905,"title":906,"date":907,"score":908},"/fr/blog/exigences-google-yahoo-expediteurs","Règles expéditeurs Google et Yahoo : guide PME","2026-08-25",0,{"_path":910,"title":911,"date":912,"score":908},"/fr/blog/cold-email-rgpd-france","Cold email et RGPD : ce que dit vraiment la loi française","2026-08-21",{"_path":914,"title":915,"date":912,"score":908},"/fr/blog/delivrabilite-smtp-ovh-infomaniak","SMTP OVH et Infomaniak : délivrabilité pas à pas",1787814398576]