[ Sending-service guides ]
Authenticate email sent through LianaMailer: configuration and verification
Configure LianaMailer domain authentication and its related subscription-page identity, then prove the actual newsletter route with a received message.
By the EmailAuth research team · 4 min read
[ Key points ]
- Keep newsletter changes coordinated
- Prove the envelope relationship
- Protect shared domain policy
[ Takeaway ]
Configure LianaMailer domain authentication and its related subscription-page identity, then prove the actual newsletter route with a received message.
[ By role ]
What this means for you
Choose your role for practical next steps.
IT / Mail Admin
Prove the envelope relationship
The domain used by the subscription site can affect the documented envelope identity.
Next steps
- Capture the suggested account records.
- Confirm support finalization.
- Compare site, From and Return-Path in a test.
CISO / SecOps
Protect shared domain policy
A newsletter rollout must not remove another sender or dilute established enforcement.
Next steps
- Review SPF scope and lookup cost.
- Check DKIM alignment.
- Approve the evidence before production.
Founder / Non-technical
Keep newsletter changes coordinated
The sending template, domain and subscription site can involve different owners.
Next steps
- Name a campaign owner.
- Schedule DNS and support work together.
- Retain the prior working campaign route.
[ FAQs ]
Frequently asked questions
Where do I get the correct LianaMailer DNS records?
Use the suggested values for the active domain in Settings > Domain Settings, with support confirmation for the exact account.
Why must I also check Settings > Sites?
Liana documents a relationship between the subscription-site domain and the envelope sender in its setup arrangement. Confirm the actual result in a received message.
Can I assume SPF must be changed at my root domain?
No. Liana support checks the need and supplies the appropriate value; inspect the actual envelope domain before editing DNS.
Does a green Verified indicator prove DMARC passes?
No. It confirms a configuration check, while a received message is needed to establish authentication and alignment.
Information about DMARC changes and deliverability RFC 9989 DMARC
Should I copy another account’s DKIM selector?
No. Use the DNS owner and public value provided for your account and sending domain.
Does a branded subscription URL guarantee delivery?
No. It is a separate configuration and functional check; authentication, content and receiver filtering still matter.
Is support involvement finished when DNS is saved?
The cited workflow calls for informing support so it can finalize the settings. Retain that confirmation.
What still blocks approval of this guide?
Exact tenant applicability, live DNS, the original received-message identity table and human SME review remain open.
[ Sources ]
Sources
- Information about DMARC changes and deliverability
Sections What should I do? · Suggested DNS settings · Subscription page url
- Instructions for IT support
Sections DKIM · SPF · Follow these instructions
- RFC 7208 SPF
Sections §4.6.4 · §3.2
- RFC 6376 DKIM
Sections §3.5 · §6
- RFC 9989 DMARC
Sections Identifier Alignment
[ Glossary ]
Glossary
- Subscription site
- The LianaMailer site used for subscription-related pages and relevant to its documented envelope setup.
- Suggested DNS values
- Account-displayed public records proposed for a selected LianaMailer domain.
- Support finalization
- The provider step described after required DNS records have been published.
- Envelope sender
- The SMTP identity used by SPF and associated with the received Return-Path.
- Alignment mode
- The policy setting determining how closely an authenticated domain must match the visible From domain.
Enterprise provenance
Why top financial institutions and governments retired their email security dashboards.
Traditional email authentication platforms sell you a dashboard and ask your engineers to do the labour. In high-stakes environments, manual oversight means delayed enforcement, configuration drift and unmonitored shadow domains.
EmailAuth is the agentic email provenance platform. Our agents enforce p=reject, keep third-party senders aligned and move your domains to full RFC 9989 compliance, the new DMARC standard,, with human-in-the-loop auditability.
SaaS · Dedicated tenancy · Air-gapped on-prem · BYOK encryption