Email security, explained
Practical explainers: what each standard does, a working example, and the mistakes we see most often.
Sender Policy Framework (SPF)
Which servers may send mail for your domain
DomainKeys Identified Mail (DKIM)
Cryptographic signatures on every message
DMARC
Policy and reporting that stops spoofing
MTA-STS & TLS-RPT
Force encrypted delivery to your mail servers
Brand Indicators for Message Identification (BIMI)
Show your logo next to authenticated mail
DANE for SMTP (TLSA)
Pin mail server certificates via DNSSEC
DNSSEC
Signed DNS answers that cannot be forged
DNS blacklists (DNSBL)
Why your IP or domain got listed and how to get off