hmLoadTopic({
hmKeywords:"ARC,Authenticated Received Chain protocol,Sender Authentication,Sender Authentication ARC Settings",
hmTitle:"ARC Settings",
hmDescription:"Authenticated Received Chain (ARC) is an email authentication protocol that lets intermediate mail servers digitally sign a message\'s authentication results. It provides an...",
hmPrevLink:"security--dkim_options.html",
hmNextLink:"security--dmarc.html",
hmParentLink:"security_menu.html",
hmBreadCrumbs:"<a href=\"security_menu.html\">Security Menu<\/a> &gt; Security Manager &gt; Sender Authentication",
hmTitlePath:"Security Menu > Security Manager > Sender Authentication > ARC Settings",
hmHeader:"<h1 class=\"p_Heading1\" style=\"page-break-after: avoid;\"><span class=\"f_Heading1\">ARC Settings<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_BodyText_Center\"><img style=\"margin:0 auto 0 auto;width:32.5000rem;height:26.9375rem;border:none\" src=\".\/images\/security-arc_settings.png\"\/><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">Authenticated Received Chain (ARC) is an email authentication protocol that lets intermediate mail servers digitally sign a message\'s authentication results. It provides an authenticated &quot;chain of custody&quot; for a message, allowing each server that handles the message to see what previous servers handled it and whether or not it was authenticated at each step. When a downstream mail server does <a href=\"security--dmarc_verification.html\" class=\"topiclink\">DMARC verification<\/a> and finds that <a href=\"security--spf__sender_id.html\" class=\"topiclink\">SPF<\/a> or <a href=\"security--dkim_verify.html\" class=\"topiclink\">DKIM<\/a> have failed (due to forwarding or mailing list modifications, for example), it can look for ARC results from a trusted server and use them to decide whether to accept the message. <\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">For more information on the ARC protocol, see: <a href=\"https:\/\/datatracker.ietf.org\/doc\/html\/rfc8617\" target=\"_blank\" class=\"weblink\" title=\"Authenticated Received Chain (ARC) Protocol\">RFC 8617: The Authenticated Received Chain (ARC) Protocol<\/a>.<\/span><\/p>\n\r<p class=\"p_DialogSectionHeading\" style=\"page-break-after: avoid;\"><span class=\"f_DialogSectionHeading\">ARC Verification<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Enable ARC verification<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Check this box to enabled ARC verification.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Trusted ARC Sealers<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_BodyText\">Trusted ARC Sealers are the domains whose ARC results you trust. ARC results from non-trusted domains are ignored when doing <a href=\"security--dmarc_verification.html\" class=\"topiclink\">DMARC verification<\/a>.<\/span><\/p>\n\r<p class=\"p_DialogSectionHeading\" style=\"page-break-after: avoid;\"><span class=\"f_DialogSectionHeading\">ARC Signing<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Sign eligible outbound messages using ARC<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_BodyText\">Forwarded messages, mailing list messages, and gateway messages with authentication results are eligible for ARC signing. ARC signing needs a designated selector and signing domain below.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Default selector<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_BodyText\">Use this option to choose the default selector to use for ARC signing. You can use the same selector that you use for <a href=\"security--dkim_sign.html\" class=\"topiclink\">DKIM signing<\/a>, or create a new one.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Default signing domain<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Choose the default domain for ARC signing.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Advanced<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_BodyText\">If you host multiple domains and want to use a different selector or signing domain for any of them, click <\/span><span class=\"f_BodyText\" style=\"font-weight: bold;\">Advanced<\/span><span class=\"f_BodyText\"> to configure that.<\/span><\/p>\n\r"
})
