Skip to content

Commit 982ab0d

Browse files
authored
Update email-authentication-arc-configure.md
1 parent 51667a8 commit 982ab0d

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

defender-office-365/email-authentication-arc-configure.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ ms.custom:
1717
- seo-marvel-apr2020
1818
description: Authenticated Received Chain (ARC) is an email authentication method that tries to preserve authentication results across devices and any message modification that occurs between the sender and recipient.
1919
ms.service: defender-office-365
20-
ms.date: 1/29/2024
20+
ms.date: 04/30/2025
2121
appliesto:
2222
- ✅ <a href="https://learn.microsoft.com/defender-office-365/eop-about" target="_blank">Exchange Online Protection</a>
2323
- ✅ <a href="https://learn.microsoft.com/defender-office-365/mdo-about#defender-for-office-365-plan-1-vs-plan-2-cheat-sheet" target="_blank">Microsoft Defender for Office 365 Plan 1 and Plan 2</a>
@@ -145,9 +145,9 @@ smtp.mailfrom=contoso.com; dkim=fail (body hash did not verify)
145145
header.d=contoso.com;dmarc=fail action=none
146146
header.from=contoso.com;compauth=pass reason=130
147147
```
148-
> **Note:**
149-
> When the ARC result is **pass** and originates from a **trusted ARC sealer**, it can be used to preserve authentication context and potentially override failures in SPF, DKIM, or DMARC caused by message modifications during transit.
150-
> However, the final spoofing determination is based on the **Composite Authentication (CompAuth)** outcome. A message may still be delivered even if ARC fails, provided SPF, DKIM, and DMARC evaluations, along with CompAuth, result in a pass.
148+
149+
> [!NOTE]
150+
> The ARC result **pass** from a **trusted ARC sealer** can potentially override failures in SPF, DKIM, or DMARC caused by message modification during transit. However, the final spoofing determination is based on the [composite authentication](email-authentication-about.md#composite-authentication) (CompAuth) outcome. Messages that fail ARC might still be delivered if they pass SPF, DKIM, DMARC, and composite authentication evaluations.
151151
152152

153153
## Trusted ARC sealer mail flow diagrams

0 commit comments

Comments
 (0)