Sender Authentication


Refers to the process of showing email providers that Cerkl Broadcast platform has your permission to send emails on your behalf. This allows to see the email is being sent from your company's domain.


This is an approximation based on average time spend for existing Cerkl Broadcast clients.


Mail Server Expert
Network Security Expert
These are the suggested technical resources needed to complete this task.


This completes the "mask" that allows emails to come legitimately from the company’s domain, as opposed to appearing as if the email was spoofed.

This is accomplished via adding 3 CNAME Records to the DNS for the company’s domain.

What resources should be made available for this: DNS.

-- CODE language-javascript -- function formatCode(el) { // find our magic declaration string. if we don't find it, // do nothing let match = el.innerHTML.match(/--\s*CODE\s+(.*)\s*--/), classNames, codeEl; if (match && match[1]) { classNames = match[1]; } else { return; } // strip off the magic string, everything preceding it, and // all leading and trailing whitespace let txt = el.innerHTML.substring(match.index+match[0].length); el.innerHTML = ''; if (classNames.match(/language-markup/)) { codeEl = el.appendChild(document.createElement('script')); codeEl.type = 'text/plain'; } else { codeEl = el.appendChild(document.createElement('pre')). appendChild(document.createElement('code')); } codeEl.className = classNames; codeEl.innerHTML = txt; } let snips = $('p:contains("CODE")'); snips.toArray().forEach(formatCode); Prism.highlightAll();

Domain Authentication

Domain authentication is a way Cerkl Broadcast platform employs to verify that an email is sent from the sender they claimed to be. It is an important process and often used in blocking harmful contents such as phishing scams. Most commonly used email authentication standards are SPF, DKIM and DMARC. Emails that fail the authentication will have a higher chance to be marked as spam or junk.

To ensure the deliverability, you need to set up the domain authentication. 

Link Branding

All links in emails coming from Cerkl Broadcast can point to a masked subdomain (root is also fine). That domain redirects to SendGrid before being forwarded to the actual destination.

To track clicks on links in emails, those links must first go to SendGrid tracking URLs in order to register the event.

Traffic to subdomain must be allowed on Networks or VPN. Internet traffic security must allow traffic to that subdomain.

CNAME Records

CNAME records (canonical name records) alias your company's domains and subdomains, pointing them to our email provider in order to sign messages with validation, and they will be visible to your email recipients. This helps to make sure we can route all of your communications properly and securely.

In order to make this work, we will need you to set up 5 CNAME records on your company's domain name server (DNS). You will do this during the implementation portion of your launch with Cerkl facilitated by your Customer Success Account Manager. Once you have completed the CNAME record attachment, you will then need to reach out to your Account Manager or Platform Configuration Engineer so that they can verify everything is working properly.

Additionally, setting up a Reverse DNS will effectively associate your Dedicated IP with your organization. This is accomplished via adding an A Record to the DNS for your company's domain.

If you have any questions at all, don’t hesitate to reach to our team via email or use the chat support in the bottom right-hand corner of any page for a quick answer.
White LabelingDomain AuthenticationLink BrandingCNAME Records