Sender Identity

Home · Guides · Alibaba Cloud

DNS · Alibaba Cloud

Alibaba Cloud DNS: 解析记录 for mail authentication.

22 October 2026

In the Alibaba Cloud DNS console (云解析 DNS), open the domain’s 解析设置. Record types map as TXT / CNAME. Turn off any HTTP proxy features on mail-auth names; only authoritative answers matter to receivers.

Publish records

  1. 云解析 DNS → domain → 解析设置 → 添加记录.
  2. SPF: type TXT, host @, value v=spf1 ….
  3. DKIM: type CNAME or TXT, host <selector>._domainkey, value from the ESP.
  4. DMARC: type TXT, host _dmarc; or type CNAME, host _dmarc, value brand.example._dmarc.hosted.senderidentity.com.
  5. TTL 10 minutes while validating, then raise if you prefer.

Hosted DMARC on this provider

If you use Sender Identity Hosted DMARC, delete the TXT at _dmarc and publish only this CNAME. We publish the DMARC TXT on our side, starting at p=none with rua at reports.senderidentity.com.

TypeName / hostValue / points toNote
CNAME_dmarc.brand.examplebrand.example._dmarc.hosted.senderidentity.comDNS only on Cloudflare. Remove any TXT at the same name.

After the CNAME resolves, open Account on the site, confirm delegation shows ready, and keep reading aggregate reports before you approve quarantine or reject.

Check the result

  1. Wait for DNS TTL (often 5 minutes to an hour).
  2. Run the free static audit on the domain.
  3. Confirm the DMARC check shows the policy you expect, and that a CNAME path is not blocked by a leftover TXT.