Long-form pieces on DNS and email security.
APRF is a proposed daily report on where your signed mail landed. What the reports show, why the numbers are rough, and whether to publish the record.
Postmaster Tools V2 drops the High, Medium, Low and Bad ratings. How to read the compliance checklist and the one sentence verdict that replace them, and who fixes what.
RFC 9989 makes DKIM on every stream a requirement for p=reject. Why forwarding breaks SPF, what the mailing list warning is worth, and when a domain is ready.
Ten lookups per check, and the order of your record decides which sender breaks. How to count, what to cut, and why flattening once by hand makes it worse.
The browser version was abandoned a decade ago. The SMTP version is in production at scale, and the operational objections to it have mostly gone.
DMARC is on the Standards Track. The Public Suffix List is out, the DNS tree walk is in, and your record needs a few small edits.
The operational problems behind DNSSEC's reputation were fixed by three RFCs and a provider rollout. What it protects, where it falls short, and what a good deployment looks like.
No articles in this category yet.