---
title: "ARC (Authenticated Received Chain): What problem does it solve?"
description: Discover how ARC (Authenticated Received Chain) enhances email security and solves authentication issues.
image: https://blog.mdaemon.com/hubfs/ARC-Authenticated-received-chainV2.png
---

[![MDaemon Technologies](https://blog.mdaemon.com/hs-fs/hubfs/MDaemon-Technologies_logo_large.png?width=564&height=110&name=MDaemon-Technologies_logo_large.png "MDaemon Technologies")](https://mdaemon.com/)

- [Blog Home](https://blog.mdaemon.com)

# MDaemon Technologies Blog

## [ARC (Authenticated Received Chain): What problem does it solve?](https://blog.mdaemon.com/arc-authenticated-received-chain-and-what-problem-does-it-solve)

 By [Brad Wyro](https://blog.mdaemon.com/author/brad-wyro)

- [Tweet](https://twitter.com/share)

Businesses concerned about the shortfalls of DMARC with forwarded messages and mailing lists will benefit from new email authentication features added to MDaemon Email Server version 24. Discover how ARC (Authenticated Received Chain) enhances email security and solves authentication issues.

## Understanding ARC and its significance

ARC (Authenticated Received Chain) is a technology that enhances the security and reliability of email communications.

It is an extension of the existing email authentication standards, such as SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail), and provides a way to validate the authenticity of email messages as they pass through multiple servers.

ARC helps to solve the problem of email authentication by allowing email recipients to track the authentication results of each email hop in the delivery chain. This ensures that the email has not been modified or tampered with during transit and provides a higher level of trust in the email's origin and content.

ARC also addresses the issue of legitimate emails being marked as spam or rejected by email filters due to authentication failures caused by forwarding or mailing list services.

By preserving the authentication results throughout the email delivery process, ARC allows legitimate emails to pass the authentication checks even if they have gone through intermediate servers.

## The problem of email authentication

Email authentication is a crucial aspect of email security.

It helps to prevent email impersonation and spoofing, ensuring that the email sender's identity can be verified and trusted.

However, the existing email authentication standards have limitations when it comes to emails that are forwarded or go through mailing lists.

When an email is forwarded, the original authentication information is lost, and the forwarded email may fail the authentication checks, leading to the email being marked as spam or rejected.

Similarly, when an email goes through a mailing list service, the authentication information gets overwritten, and the email may fail the authentication checks as well.

These authentication failures can result in legitimate emails being wrongly classified as spam or rejected, causing inconvenience and potential loss of important communication.

## How ARC addresses authentication challenges

ARC addresses authentication challenges by creating a chain of authentication results that can be verified by the email recipient.

![ARC - Authenticated Received Chain Diagram](https://blog.mdaemon.com/hs-fs/hubfs/ARC-Diagram.png?width=1400&height=900&name=ARC-Diagram.png)

 

When an email is sent, each server in the delivery chain adds its authentication result to the ARC header of the email.

ARC-Authentication-Results: i=1; mx.google.com;  
       dkim=pass header.i=@example.com header.s=20132151.pm header.b=SaTOwM7u;  
       dkim=pass [header.i=@ex.mtasv.com](mailto:header.i=@ex.mtasv.com) header.s=pm header.b=uUBEpN9j;  
       spf=pass (google.com: domain of pm\_bounces@exbounces.example.com designates 20.34.152.121 as permitted sender) smtp.mailfrom=ex\_bounces@exbounces.example.com;  
       dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=example.com

 

The recipient's email server can then validate the entire chain of authentication results to ensure that the email has not been modified or tampered with during transit.

By preserving the authentication results, ARC allows the recipient to trust the email's authenticity even if it has gone through intermediate servers.

ARC also introduces a new header field called 'seal' that is used to indicate whether the authentication results have been successfully validated or not.

ARC-Seal: i=1; a=rsa-sha256; t=1504715872; cv=none;  
        d=google.com; s=arc-20160816;  
        b=Nz9pPmKDifg+wmSdwCnUjXvG9jG9WFoF6fghYY1QdGolnG/TZoGeuJHkzDl8KQyVtt  
         xsTqAtlPRurwu2PTZLRnPafig2TOAXI+0/qFic8pmRnPrWP+0r4  
         N838/B8VMHPYKxp7g6mgrQ  
         0dC5MbYSQ7UBrljWB2p3E3RZCOXLt6pdEDcu  
         jMMVFJusIEOr+al0Iv610kx10pxUimQrZtSRL  
         8HPA==

This helps the recipient's email server to determine whether the email should be trusted or treated as suspicious.

Overall, ARC provides a way to maintain the integrity of email authentication even in scenarios where emails are forwarded or go through mailing lists.

## Benefits of implementing ARC

Implementing ARC has several benefits for both email senders and recipients.

For email senders, ARC ensures that their legitimate emails are not marked as spam or rejected due to authentication failures caused by forwarding or mailing lists.

For email recipients, ARC provides a higher level of trust in the authenticity of the received emails. They can be confident that the email has not been tampered with during transit and that the sender's identity has been verified. This helps to reduce the risk of falling victim to email phishing attacks and other email-based scams.

Overall, implementing ARC enhances email security and improves the overall email experience for both senders and recipients.

## Future implications of ARC in email security

The adoption of ARC has the potential to significantly improve email security in the future.

As more email service providers and organizations implement ARC, the reliability and trustworthiness of email communications will increase. With ARC, it becomes more difficult for malicious actors to forge the origin of an email and deceive recipients.

In addition, the preservation of authentication results throughout the email delivery process can enable better email filtering and classification, reducing the risk of false positives or false negatives.

ARC support was added to MDaemon Email Server version 24. [Click here to download your free trial](https://mdaemon.com/pages/downloads-mdaemon-mail-server-free-trial)!

![Brad Wyro](https://blog.mdaemon.com/hs-fs/hubfs/Brad-2023v2.jpg?width=100&height=100&name=Brad-2023v2.jpg)

#### Written by [Brad Wyro](https://blog.mdaemon.com/author/brad-wyro)

Brad has worked in technical and marketing roles at MDaemon Technologies, where he contributes as Content Marketing Manager. Brad balances technical and creative information to develop easy to understand videos and content to educate prospects and customers.

[![BACK TO ALL ARTICLES](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/6572702/05b24dbb-70a6-4eaa-9507-321cb27f7228.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/6572702/05b24dbb-70a6-4eaa-9507-321cb27f7228)

### Subscribe to Email Updates

- [Popular](https://blog.mdaemon.com/arc-authenticated-received-chain-and-what-problem-does-it-solve#tab-2)
- [Recent](https://blog.mdaemon.com/arc-authenticated-received-chain-and-what-problem-does-it-solve#tab-1)
- [Categories](https://blog.mdaemon.com/arc-authenticated-received-chain-and-what-problem-does-it-solve#tab-3)

### Lists by Topic

- [Email Security (73)](https://blog.mdaemon.com/tag/email-security)
- [MDaemon Email Server (45)](https://blog.mdaemon.com/tag/mdaemon-email-server)
- [Email How To (38)](https://blog.mdaemon.com/tag/email-how-to)
- [Email Best Practices (29)](https://blog.mdaemon.com/tag/email-best-practices)
- [Phishing (28)](https://blog.mdaemon.com/tag/phishing)
- [Product Updates (28)](https://blog.mdaemon.com/tag/product-updates)
- [Security Gateway for Email (27)](https://blog.mdaemon.com/tag/security-gateway-for-email)
- [Stop Spam Email (25)](https://blog.mdaemon.com/tag/stop-spam-email)
- [Cybersecurity (24)](https://blog.mdaemon.com/tag/cybersecurity)
- [Email Security Best Practices (23)](https://blog.mdaemon.com/tag/email-security-best-practices)
- [Email Server (22)](https://blog.mdaemon.com/tag/email-server)
- [Two-Factor Authentication (18)](https://blog.mdaemon.com/tag/two-factor-authentication)
- [Email Gateway How-To (17)](https://blog.mdaemon.com/tag/email-gateway-how-to)
- [Email Security Trends (15)](https://blog.mdaemon.com/tag/email-security-trends)
- [SecurityGateway (13)](https://blog.mdaemon.com/tag/securitygateway)
- [Health Care Security (12)](https://blog.mdaemon.com/tag/health-care-security)
- [Spear Phishing (12)](https://blog.mdaemon.com/tag/spear-phishing)
- [Data Leak Prevention (11)](https://blog.mdaemon.com/tag/data-leak-prevention)
- [Email Encryption (11)](https://blog.mdaemon.com/tag/email-encryption)
- [Anti-Spoofing (10)](https://blog.mdaemon.com/tag/anti-spoofing)
- [MDaemon Webmail (10)](https://blog.mdaemon.com/tag/mdaemon-webmail)
- [Email Archiving (8)](https://blog.mdaemon.com/tag/email-archiving)
- [Email Management (8)](https://blog.mdaemon.com/tag/email-management)
- [Email Privacy (8)](https://blog.mdaemon.com/tag/email-privacy)
- [Email Spoofing (8)](https://blog.mdaemon.com/tag/email-spoofing)
- [Business Email Compromise (7)](https://blog.mdaemon.com/tag/business-email-compromise)
- [Tutorial (7)](https://blog.mdaemon.com/tag/tutorial)
- [Anti-Virus (6)](https://blog.mdaemon.com/tag/anti-virus)
- [Collaboration (6)](https://blog.mdaemon.com/tag/collaboration)
- [Email Software (6)](https://blog.mdaemon.com/tag/email-software)
- [Update (6)](https://blog.mdaemon.com/tag/update)
- [Email Authentication (5)](https://blog.mdaemon.com/tag/email-authentication)
- [Compliance (4)](https://blog.mdaemon.com/tag/compliance)
- [Email Remote Administration (4)](https://blog.mdaemon.com/tag/email-remote-administration)
- [MailStore Archive Server (4)](https://blog.mdaemon.com/tag/mailstore-archive-server)
- [Microsoft 365 Exchange Alternative (4)](https://blog.mdaemon.com/tag/microsoft-365-exchange-alternative)
- [Passwords (4)](https://blog.mdaemon.com/tag/passwords)
- [Software update (4)](https://blog.mdaemon.com/tag/software-update)
- [Archive (3)](https://blog.mdaemon.com/tag/archive)
- [MDaemon (3)](https://blog.mdaemon.com/tag/mdaemon)
- [Attachments (2)](https://blog.mdaemon.com/tag/attachments)
- [Business Email (2)](https://blog.mdaemon.com/tag/business-email)
- [Cloud (2)](https://blog.mdaemon.com/tag/cloud)
- [DMARC (2)](https://blog.mdaemon.com/tag/dmarc)
- [Email Collaboration (2)](https://blog.mdaemon.com/tag/email-collaboration)
- [Industry Insight (2)](https://blog.mdaemon.com/tag/industry-insight)
- [insider threats (2)](https://blog.mdaemon.com/tag/insider-threats)
- [msp (2)](https://blog.mdaemon.com/tag/msp)
- [Anti-Relay (1)](https://blog.mdaemon.com/tag/anti-relay)
- [BEC (1)](https://blog.mdaemon.com/tag/bec)
- [Backscatter (1)](https://blog.mdaemon.com/tag/backscatter)
- [Bayesian Learning (1)](https://blog.mdaemon.com/tag/bayesian-learning)
- [Content Filter (1)](https://blog.mdaemon.com/tag/content-filter)
- [DNS-BL (1)](https://blog.mdaemon.com/tag/dns-bl)
- [Disaster Recovery (1)](https://blog.mdaemon.com/tag/disaster-recovery)
- [Email Software Reviews (1)](https://blog.mdaemon.com/tag/email-software-reviews)
- [Encrypt (1)](https://blog.mdaemon.com/tag/encrypt)
- [External Email Threats (1)](https://blog.mdaemon.com/tag/external-email-threats)
- [Gateway (1)](https://blog.mdaemon.com/tag/gateway)
- [Inbox (1)](https://blog.mdaemon.com/tag/inbox)
- [Inbox Zero (1)](https://blog.mdaemon.com/tag/inbox-zero)
- [Macros (1)](https://blog.mdaemon.com/tag/macros)
- [Monitoring (1)](https://blog.mdaemon.com/tag/monitoring)
- [Quarantine (1)](https://blog.mdaemon.com/tag/quarantine)
- [RelayFax (1)](https://blog.mdaemon.com/tag/relayfax)
- [Software (1)](https://blog.mdaemon.com/tag/software)
- [Training (1)](https://blog.mdaemon.com/tag/training)
- [Troubleshooting (1)](https://blog.mdaemon.com/tag/troubleshooting)
- [Upgrade (1)](https://blog.mdaemon.com/tag/upgrade)
- [Web Conferencing (1)](https://blog.mdaemon.com/tag/web-conferencing)
- [Windows Server (1)](https://blog.mdaemon.com/tag/windows-server)
- [internal email threat (1)](https://blog.mdaemon.com/tag/internal-email-threat)
- [ssl (1)](https://blog.mdaemon.com/tag/ssl)
- [tax scams (1)](https://blog.mdaemon.com/tag/tax-scams)

see all

### Posts by Topic

- [Email Security (73)](https://blog.mdaemon.com/tag/email-security)
- [MDaemon Email Server (45)](https://blog.mdaemon.com/tag/mdaemon-email-server)
- [Email How To (38)](https://blog.mdaemon.com/tag/email-how-to)
- [Email Best Practices (29)](https://blog.mdaemon.com/tag/email-best-practices)
- [Phishing (28)](https://blog.mdaemon.com/tag/phishing)
- [Product Updates (28)](https://blog.mdaemon.com/tag/product-updates)
- [Security Gateway for Email (27)](https://blog.mdaemon.com/tag/security-gateway-for-email)
- [Stop Spam Email (25)](https://blog.mdaemon.com/tag/stop-spam-email)
- [Cybersecurity (24)](https://blog.mdaemon.com/tag/cybersecurity)
- [Email Security Best Practices (23)](https://blog.mdaemon.com/tag/email-security-best-practices)
- [Email Server (22)](https://blog.mdaemon.com/tag/email-server)
- [Two-Factor Authentication (18)](https://blog.mdaemon.com/tag/two-factor-authentication)
- [Email Gateway How-To (17)](https://blog.mdaemon.com/tag/email-gateway-how-to)
- [Email Security Trends (15)](https://blog.mdaemon.com/tag/email-security-trends)
- [SecurityGateway (13)](https://blog.mdaemon.com/tag/securitygateway)
- [Health Care Security (12)](https://blog.mdaemon.com/tag/health-care-security)
- [Spear Phishing (12)](https://blog.mdaemon.com/tag/spear-phishing)
- [Data Leak Prevention (11)](https://blog.mdaemon.com/tag/data-leak-prevention)
- [Email Encryption (11)](https://blog.mdaemon.com/tag/email-encryption)
- [Anti-Spoofing (10)](https://blog.mdaemon.com/tag/anti-spoofing)
- [MDaemon Webmail (10)](https://blog.mdaemon.com/tag/mdaemon-webmail)
- [Email Archiving (8)](https://blog.mdaemon.com/tag/email-archiving)
- [Email Management (8)](https://blog.mdaemon.com/tag/email-management)
- [Email Privacy (8)](https://blog.mdaemon.com/tag/email-privacy)
- [Email Spoofing (8)](https://blog.mdaemon.com/tag/email-spoofing)
- [Business Email Compromise (7)](https://blog.mdaemon.com/tag/business-email-compromise)
- [Tutorial (7)](https://blog.mdaemon.com/tag/tutorial)
- [Anti-Virus (6)](https://blog.mdaemon.com/tag/anti-virus)
- [Collaboration (6)](https://blog.mdaemon.com/tag/collaboration)
- [Email Software (6)](https://blog.mdaemon.com/tag/email-software)
- [Update (6)](https://blog.mdaemon.com/tag/update)
- [Email Authentication (5)](https://blog.mdaemon.com/tag/email-authentication)
- [Compliance (4)](https://blog.mdaemon.com/tag/compliance)
- [Email Remote Administration (4)](https://blog.mdaemon.com/tag/email-remote-administration)
- [MailStore Archive Server (4)](https://blog.mdaemon.com/tag/mailstore-archive-server)
- [Microsoft 365 Exchange Alternative (4)](https://blog.mdaemon.com/tag/microsoft-365-exchange-alternative)
- [Passwords (4)](https://blog.mdaemon.com/tag/passwords)
- [Software update (4)](https://blog.mdaemon.com/tag/software-update)
- [Archive (3)](https://blog.mdaemon.com/tag/archive)
- [MDaemon (3)](https://blog.mdaemon.com/tag/mdaemon)
- [Attachments (2)](https://blog.mdaemon.com/tag/attachments)
- [Business Email (2)](https://blog.mdaemon.com/tag/business-email)
- [Cloud (2)](https://blog.mdaemon.com/tag/cloud)
- [DMARC (2)](https://blog.mdaemon.com/tag/dmarc)
- [Email Collaboration (2)](https://blog.mdaemon.com/tag/email-collaboration)
- [Industry Insight (2)](https://blog.mdaemon.com/tag/industry-insight)
- [insider threats (2)](https://blog.mdaemon.com/tag/insider-threats)
- [msp (2)](https://blog.mdaemon.com/tag/msp)
- [Anti-Relay (1)](https://blog.mdaemon.com/tag/anti-relay)
- [BEC (1)](https://blog.mdaemon.com/tag/bec)
- [Backscatter (1)](https://blog.mdaemon.com/tag/backscatter)
- [Bayesian Learning (1)](https://blog.mdaemon.com/tag/bayesian-learning)
- [Content Filter (1)](https://blog.mdaemon.com/tag/content-filter)
- [DNS-BL (1)](https://blog.mdaemon.com/tag/dns-bl)
- [Disaster Recovery (1)](https://blog.mdaemon.com/tag/disaster-recovery)
- [Email Software Reviews (1)](https://blog.mdaemon.com/tag/email-software-reviews)
- [Encrypt (1)](https://blog.mdaemon.com/tag/encrypt)
- [External Email Threats (1)](https://blog.mdaemon.com/tag/external-email-threats)
- [Gateway (1)](https://blog.mdaemon.com/tag/gateway)
- [Inbox (1)](https://blog.mdaemon.com/tag/inbox)
- [Inbox Zero (1)](https://blog.mdaemon.com/tag/inbox-zero)
- [Macros (1)](https://blog.mdaemon.com/tag/macros)
- [Monitoring (1)](https://blog.mdaemon.com/tag/monitoring)
- [Quarantine (1)](https://blog.mdaemon.com/tag/quarantine)
- [RelayFax (1)](https://blog.mdaemon.com/tag/relayfax)
- [Software (1)](https://blog.mdaemon.com/tag/software)
- [Training (1)](https://blog.mdaemon.com/tag/training)
- [Troubleshooting (1)](https://blog.mdaemon.com/tag/troubleshooting)
- [Upgrade (1)](https://blog.mdaemon.com/tag/upgrade)
- [Web Conferencing (1)](https://blog.mdaemon.com/tag/web-conferencing)
- [Windows Server (1)](https://blog.mdaemon.com/tag/windows-server)
- [internal email threat (1)](https://blog.mdaemon.com/tag/internal-email-threat)
- [ssl (1)](https://blog.mdaemon.com/tag/ssl)
- [tax scams (1)](https://blog.mdaemon.com/tag/tax-scams)

See all

#### About MDaemon Technologies

MDaemon Technologies is a pioneer in developing email and email security software helping to protect customers from evolving cyber-security threats. Its products and services are trusted by thousands of organizations in over 140 countries. For more than two decades, the company’s products have been developed with the ongoing input of IT professionals who demand reliable, affordable software that requires minimal effort to manage.

The software can be deployed in virtual, hosted cloud, on-premises, or hybrid network environments. The company sells its software and services directly and through a network of global channel partners.

For more information, visit [www.mdaemon.com](https://www.altn.com/).

Copyright © 1996-2026 MDaemon Technologies.  View [privacy policy](https://mdaemon.com/policies/privacy-policy).

 

###### Contact Us

 +1.817-601-3222

[sales@help.mdaemon.com](mailto:sales@help.mdaemon.com)

 6340 Lake Worth Blvd.  
 Fort Worth, TX 76135

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Brad Wyro",
    "url" : "https://blog.mdaemon.com/author/brad-wyro"
  },
  "dateModified" : "2024-06-17T15:35:05.830Z",
  "datePublished" : "2024-05-10T16:07:35.000Z",
  "headline" : "ARC (Authenticated Received Chain): What problem does it solve?",
  "image" : [ "https://blog.mdaemon.com/hubfs/ARC-Authenticated-received-chainV2.png" ],
  "mainEntityOfPage" : {
    "@id" : "https://blog.mdaemon.com/arc-authenticated-received-chain-and-what-problem-does-it-solve",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "url" : "https://blog.mdaemon.com/hubfs/MDaemon-Technologies_logo_large.png"
    },
    "name" : "MDaemon Technologies"
  }
}
```