How can I fix alignment issues?
Still have a question, spotted an error, or have a better explanation or a source we should cite?
You've got two main paths to fix alignment. Most organizations go with DKIM alignment because it's more reliable and survives forwarding. The other option is SPF alignment, but it's trickier to set up and often breaks when mail gets forwarded.
Path 1: DKIM Alignment (recommended) Ask your ESP to provide CNAME records that let them sign your outgoing mail with your domain as the d= tag. Once you add those CNAME records to your DNS, the ESP will sign with something like d=yourdomain.com instead of d=theirservice.com. Your DKIM signature now matches your From header, and alignment passes. This is the industry standard because it's forwarder-friendly and doesn't require Return-Path tweaks.
Path 2: SPF Alignment Configure a custom Return-Path on your domain (same root domain as your From header). Your ESP needs to support this, and you'll need DNS changes to make it work. The downside: forwarding often breaks this setup because it changes the Return-Path.
So Start with how third-party senders affect alignment to understand exactly which fix your ESP supports. Then use what domain is checked for DKIM alignment to verify your setup works.
Contributors
Who worked on this answer
Every name links to their profile. Every company links to their site. Real people, real accountability.