marcbradshaw

5 ms·

1.
by marcbradshaw 5y ago
Not even then, RFCs state that a CNAME may not exist with any other RR type, and your apex domain needs at least SOA and NS records. A CNAME on the apex domain may kind of work, but it will present as broken in subtle and unexpected ways.
2.
by marcbradshaw 5y ago
DKIM and DMARC can be CNAMES, many services already use this, at Fastmail for example for DKIM you setup CNAMES, and we manage DKIM keys for you. SPF needs to be on your (root/organizational) domain, and you don't want (can't
3.
by marcbradshaw 5y ago
There are services which do that, but it doesn't work in every situation. It can't (for example) cope with SPF macros, which is where the server looking up the record can replace parts of the record it is requesting with variables
4.
by marcbradshaw 5y ago
ARC addresses a very specific subset of DMARC problems, and in doing so introduces another set of problems.
5.
by marcbradshaw 6y ago
* upto a limit of 10 lookups, which is surprisingly easy to hit these days
6.
by marcbradshaw 6y ago
SMTP is going to be with us for a long while yet, but some folks are standing up to do something about IMAP - https://jmap.io/
7.
by marcbradshaw 6y ago
SPF asserts that a given IP address is authorized to send mail from a particular envelope sender domain (the user typically does not see this domain) An email with a user visible From address of potus@whitehouse.gov can have passing SPF fro
8.
by marcbradshaw 6y ago
and of course spammers would never have access to vast botnets to do that work. POW is (imho) a terrible idea.
9.
by marcbradshaw 6y ago
"We set a specific header in the email called Return-Path with all emails sent through our email service. If you take a peek at a raw email sent over OhMySMTP you’ll find that the return path ends in @mailer.ohmysmtp.com, and if you lo
10.
Validity Acquires Return Path, the Leader in Email Deliverability(validity.com)
1 points by marcbradshaw 7y ago|1 comments
11.
by marcbradshaw 8y ago
The starttls-everywhere IP connects, tries a bunch of commands which don't look at all like a regular mail connection. It cycles through a bunch of tls settings and never sends an email. In short, it got itself blocked by anti-spam mea