Define custom Return-Path without a dedicated IP

wilsontayar

Currently, if the portal does not have the dedicated IP add-on, all e-mails are sent using a "hubspotemail.net" domain in the "Return-Path" header.

By doing so HubSpot is breaking SPF Alignment rules. SPF and DKIM alignment are positive indicators and should be considered for the security of users, even those that do not need a dedicated IP setup. 

 

Competitors are already offering this feature with a simple CNAME entry, see: https://postmarkapp.com/support/article/910-how-do-i-add-a-custom-return-path 

 

Without proper return-path values, all DMARC reports and Google's Postm Authentication reports show SPF fails, making it harder to detect problems and postponing companies to fully implement DMARC's quarantine/reject policies.

HubSpot updates
9 Replies
kfox
Member

This should definitely be an option given by Hubspot.

GrayTShirt
Member

Have to second the DMARC compliance. I could really use the option to set Return-Path

PWD
Member

Please correctly support SPF for DMARC compliance. DKIM alone can break for many reasons. For example, DKIM breaks if a recipient has an email gateway such as ProofPoint that rewrites web links in order to pass through a scanner.

jaschris
Member

We are seeing SPF alignment as a major issue also, please consider fixing this known issue.

olalofgren
Member

Agree. This should really be added for better dmarc compliance 

kbpc
Participant

Same issue here as well, we're looking to start enforcing DMARC, but simply cannot as 100% of the emails we're sending via Hubspot are failing the SPF requirement.

Lumen5KJ
Member

I agree with all comments thus far. My company also needs to properly enforce DMARC, and having 0% SPF alignment from HubSpot is a serious blocker and pain point.

Lumen5KJ
Member

Heads-up to everyone following. Please consider upvoting this Idea, which is closely related to this one. Hopefully, we can collectively get more visibility on both Ideas so that it gets flagged for consideration by the HubSpot product team.

MPrentice
Participant

Agree that something needs to be done to improve SPF compliance here.

 

Due to this type of issue, we've moved away from all HubSpot emails and we use SendGrid for all of our transational emails now. This has resulted in almost none of our emails getting blocked or not being received, which was a major issue while using HubSpot emails (for example after a HubSpot form is filled out).