Viewing profile — marcbradshaw

Not even then, RFCs state that a CNAME may not exist with any other RR type, and your apex domain needs at least SOA and NS records. A CNAME on the apex domain may kind of work, bu…

DKIM and DMARC can be CNAMES, many services already use this, at Fastmail for example for DKIM you setup CNAMES, and we manage DKIM keys for you. SPF needs to be on your (root/orga…

There are services which do that, but it doesn't work in every situation. It can't (for example) cope with SPF macros, which is where the server looking up the record can replace p…

ARC addresses a very specific subset of DMARC problems, and in doing so introduces another set of problems.

* upto a limit of 10 lookups, which is surprisingly easy to hit these days

SMTP is going to be with us for a long while yet, but some folks are standing up to do something about IMAP - https://jmap.io/

SPF asserts that a given IP address is authorized to send mail from a particular envelope sender domain (the user typically does not see this domain) An email with a user visible F…

and of course spammers would never have access to vast botnets to do that work. POW is (imho) a terrible idea.

"We set a specific header in the email called Return-Path with all emails sent through our email service. If you take a peek at a raw email sent over OhMySMTP you’ll find that the …

The starttls-everywhere IP connects, tries a bunch of commands which don't look at all like a regular mail connection. It cycles through a bunch of tls settings and never sends an …