What is the email deliverability score for reddit.com?

The email deliverability score for reddit.com is 92/100 (Excellent). This score reflects the domain's SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI configuration.

Does reddit.com have DMARC configured?

Yes, reddit.com has a DMARC record configured. The policy is set to reject.

Does reddit.com have SPF configured?

Yes, reddit.com has an SPF record. The all mechanism is ~all.

reddit.com Email Deliverability Score: 92/100

92 / 100

Excellent

reddit.com

● SPF● DKIM● DMARC○ MTA-STS○ TLS-RPT● BIMI

Last checked: 2026-04-25 · Permalink

Detailed Checks

✓

SPF

Passed

Record

v=spf1 include:amazonses.com include:_spf.google.com include:19922862.spf01.hubspotemail.net include:reddit.deliver.highspot.com exists:%{i}._spf.mta.salesforce.com ip4:103.151.192.0/23 ip4:185.12.80.0/22 ip4:188.172.128.0/20 ip4:192.161.144.0/20 ip4:216.198.0.0/18 include:sent-via.netsuite.com ip4:52.50.24.208 ip4:35.174.145.124 ~all

All Mechanism~all

Includesamazonses.com, _spf.google.com, 19922862.spf01.hubspotemail.net, reddit.deliver.highspot.com, sent-via.netsuite.com

DNS Lookups6

SPF uses '~all' (softfail) — unauthorized sends will be marked but not rejected.

Softfail is a safe starting point. For stronger protection, consider '-all' (hardfail) once you're confident all legitimate senders are included.

✓

DKIM

Warnings

Selectors Foundgoogle, k1

Key Size (google)2352 bits

Key Size (k1)1296 bits

DKIM key for selector 'k1' is 1296 bits — consider upgrading to 2048+.

1024-bit keys are being deprecated by many providers. Plan to rotate to 2048-bit or larger keys.

✓

DMARC

Passed

Policyreject

Reporting (rua)reddit@us.cp-dmarc.com

✗

MTA-STS

Missing

No MTA-STS record found.

MTA-STS (RFC 8461) allows mail servers to discover your TLS policy, preventing downgrade attacks. Publish a TXT record at _mta-sts.<domain> with 'v=STSv1; id=<unique_id>;'.

✗

TLS-RPT

Missing

No TLS-RPT record found.

TLS-RPT (RFC 8460) allows receivers to send you reports about TLS connection failures. Publish a TXT record at _smtp._tls.<domain> with 'v=TLSRPTv1; rua=mailto:tls-reports@<domain>;'.

✓

BIMI

Passed

Logo Locationhttps://www.redditstatic.com/emaildigest/reddit-logo.svg

BIMI record has no a= (authority certificate) tag.

The a= tag points to a VMC (Verified Mark Certificate) which is required for major email clients (Gmail, Apple Mail) to display your logo. Without it, only some clients will show the BIMI logo. Add 'a=https://<domain>/vmc.pem' when you have a VMC.

Check Your Own Domain's Email Deliverability

Get instant SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI analysis for any domain — free.

Check Your Domain API Access →

Related Domain Checks

Analyze email headers · MailCheck API · Documentation · Blog