Drip stamps your mail “via Drip.com” until you delegate a sending domain by CNAME — two DKIM selectors and a sending host that make your flows authenticate as you.
Drip authenticates by CNAME delegation: add a drip sending host plus two DKIM selectors — s1._domainkey and s2._domainkey — and your mail stops showing “via Drip.com” (or “via dripemail2.com” when it's misconfigured). Registrars that block underscores in CNAMEs get an MX-plus-two-TXT workaround from Drip support instead. Source: help.drip.com · verified 2026-07-15
p=none and a rua address, watch reports for a week, confirm this sender shows 100% pass.No. Adding SPF includes and DKIM records only adds authentication — it never blocks existing mail. The only risky step is tightening your DMARC policy, and that comes later, after reports confirm everything passes.
Send yourself a test email and inspect the headers for spf=pass, dkim=pass and dmarc=pass — or just watch your DMARCKeeper dashboard: the sender's pass rate should hit 100% within a day or two.
Yes. SPF and DKIM authenticate mail; DMARC is what tells receivers to BLOCK mail that fails, and it's the piece Gmail, Yahoo and Outlook now check for explicitly.