📧

Email Authentication: SPF, DKIM & DMARC Together

Medium

Free preview · 2 of 5 steps

Three records, one goal: stop phishing

Phishing email claims to come from ceo@yourcompany.com — but actually arrives from the attacker's server. Email was designed without authentication; anyone can put any From: address.

SPF, DKIM, and DMARC are three DNS-based defenses that work together: SPF controls which servers may send, DKIM cryptographically signs messages, DMARC ties them together and enforces policy.

Packets in motion — click to inspect:

1 / 2

Space to play/pause · ← → to step