Currently, if the portal does not have the dedicated IP add-on, all e-mails are sent using a "hubspotemail.net" domain in the "Return-Path" header.
By doing so HubSpot is breaking SPF Alignment rules. SPF and DKIM alignment are positive indicators and should be considered for the security of users, even those that do not need a dedicated IP setup.
Without proper return-path values, all DMARC reports and Google's Postm Authentication reports show SPF fails, making it harder to detect problems and postponing companies to fully implement DMARC's quarantine/reject policies.
Arriving here from this other closely related idea, The custom return path/CNAME implementation is fairly simple and would allow HubSpot email to finally become SPF aligned. After a long conversation with HubSpot support, I was surprised that learn that it was not our configuration that causing 0% SPF aligment, it was HubSpots lack of support for a custom "Mail From", as most other serious providers out there do support.
It is a bit disheartening to see that these ideas have been promoted here for so long, though seemingly without any attention from HubSpot.
So I'm still a bit new to DMARC - Can I still implement DMARC DNS policies on my domains even with this missing feature from Hubspot? I have confirmed we are SPF and DKIM aligned for everything we send Except for Hubspot, which shows us the error being discussed here (Set up a custom return-path).
based on @Chris46 comments, it sound like DMARC policy can be enabled, I just have to keep the default "relaxed" settings. Appreciate anyone's feedback.
More than 2 years later this simple fix is not there. C'mon, Hubspot, you position your USP as "marketing oriented CRM", but your email marketing is full of holes, that puts you out of this category. We already opted for other tool in sequences, now when it comes to marketing emails seems that we can't have crucial compliance feature fixed. Hard to believe.
Someone must be interested in writing a story about a marketing platform that hasn't figured out email yet ... ? Dharmesh must cry himself to sleep at night when he's not writing about how culture and good management result in high performing (ahem!) teams.
It's been a while since i follow the thread expecting the feature to be implemented but i guess i'll have to wait (a lot??) more ... Thank you in advance
Hubspot is still indicating that the "dedicated IP" is the only solution for $3,600/yr.
"You need a dedicated IP to have a custom return path - this is why you and other members of the community aren't seeing it outright available in marketing hub professionals. Dedicated IPs are an additional $300 per month, you can purchase it through us at HubSpot and HubSpot would help monitor it for health."
I argue that other email heavy products can do SPF without dedicated IP's and additional costs. It sounds like Hubspot might be willing to discount the dedicated IP if we push hard enough, but there was no indication that they will have a fix for this anytime soon. If this is important to your security teams, then you'll have to commit to the extra cost or find a different solution.
