SPF, DKIM, DMARC, BIMI and the rest — what they are, why inbox providers care, and how to check whether your own domain (or a competitor's) has them configured right.
Run a Free AuditSPF is a DNS TXT record that lists which mail servers are allowed to send email on behalf of your domain. Receiving servers check this list ...
Read moreDKIM adds a cryptographic signature to outgoing email, proving the message wasn't altered in transit and really came from the claimed domain...
Read moreDMARC tells receiving servers what to do when SPF or DKIM checks fail (reject, quarantine, or do nothing) and who to send failure reports to...
Read moreBIMI lets a verified brand logo appear next to emails in supporting inboxes (Gmail, Yahoo, Apple Mail). Requires DMARC enforcement (not p=no...
Read moreMTA-STS is a DNS + HTTPS policy that forces mail servers to only deliver email to your domain over encrypted (TLS) connections, preventing d...
Read moreTLS Reporting is a DNS record that tells other mail servers where to send reports about TLS connection failures when delivering to your doma...
Read moreDNSSEC cryptographically signs DNS records so resolvers can verify they haven't been tampered with in transit — protects against DNS spoofin...
Read more