Job description
The case is this:
The domain is parked on home.co.uk, the store runs under sky-shop.co.uk which now works with Cloudflare, and emails are sent via API from freshmail and communication (customer inquiries from the store to the email inbox via internal Sky-shop+Gmail settings). The email address that matches the main domain is handled 100% by Gmail.
And now yes - Freshmail wants to authorize DMARC and Chinese soup “does not work”. DKIM is ok, SPF seems to be too. I don't know where to set what and how, because Freshmail with Sky-shop are flipping responsibility and ideas, but the end result is that in addition to this error with DMARC I get a non-stop email from noreply-smtp-tls-reporting@google.com with the content: This is an aggregate TLS report from google.com + .gz attachment
And in the meantime Sky-shop wrote an email saying that in total I don't need to pin them with Cloudflare, but it would be good for me to do it :)
“You have received this message because we observe that the domain connected to your store is still not secured by Cloudflare.
There is no cost to enable the service, and it significantly increases the security of your site.”