tag
email authentication
2 articles with this tag
2026-06-23
A phishing email forged your own domain? Spoofing vs a breach, and how to stop it
A suspicious email that appears to come from your own domain is usually not a breach — it's a forged From, because SMTP lets anyone write the From line. Reading the headers (Authentication-Results, Received, Reply-To) tells a breach from a forgery. The main reason it reaches your inbox is a missing DMARC policy. Fix it with SPF → DKIM → DMARC (p=none → reject).
2026-06-08
What are SPF / DKIM / DMARC — the trio that protects your domain from spoofed email
SPF/DKIM/DMARC are three DNS settings so receivers can verify your domain's mail. SPF = which servers may send, DKIM = a cryptographic signature, DMARC = the policy plus reports. Together they stop spoofing in your name. Ramp DMARC from p=none upward.