📧

SPF & DKIM Email Authentication

Medium

Free preview · 2 of 6 steps

The email spoofing problem

SMTP was designed without authentication — anyone can send email claiming to be from ceo@yourcompany.com. This enables phishing, business email compromise (BEC), and spam.

SPF (who is authorized to send) and DKIM (cryptographic signature of content) are the two primary defenses, both published in DNS.

Packets in motion — click to inspect:

1 / 2

Space to play/pause · ← → to step