SPF Policy controls what happens with unauthorised senders in your email domain, and it has a variety of parameters to choose from, along with 3 levels of restriction. The recommended level is always “-all” to limit to your selection only, since many email services have no security restrictions for creating email accounts. […]
FAQ: Under the Hood
SPF record existence
SPF Record takes part in the identification of the origin of emails in your domain. This is done by specifying which servers are allowed to send messages through your domain by keeping a list of authorised senders. Suspicious senders will be recognised to protect from fake users. […]
DMARC Policy
DMARC Record is implemented to report and classify emails that failed the authenticationstep on your server and decide what to do with them. This way, your main email folder only contains trusted messages and notifies suspicious emails to prevent attacks. […]
DKIM record existence
DKIM Record strengthens your e-mail security through authentication. It adds digital signatures to ensure the legitimate origin of the e-mails on your @domain and the content integrity of the messages sent through it. Additionally, helps e-mail providers such as @gmail or @outlook identify you as a trusted source, so messages from your domain don’t easily […]
CAA record existence
CAA Record adds security against impersonators by restricting Authorities that are allowed to give certificates for your website to just the ones chosen by you. This not only prevents fake webpages from copying yours, but it additionally notifies you if strange activity happened like someone trying to link a malicious website to your domain, reducing the risk of fake certificates. […]
DS and DNSKEY record matching
Validation processes are always precise. The DNSKEY has to match the officially registered DS Record to grant access, otherwise it will be rejected because your address failed verification, preventing users from being able to reach your website. […]
DNSKEY record existence
DNSKEY Record ensures the validation by implementing a pair of Signature Keys to verifythat the addresses come from a legitimate source. Let’s say your ID gets stolen: a good impersonator can still book a flight and validate a boarding pass, but biometric control at security will scan face or fingerprints (Signature Keys) and detect that it does not match the legitimate owner’s. […]
DS record existence
First of all, DNS is the system that indicates your website’s address, but this “path” is not secure by itself, so attackers could give users wrong directions to follow. DS Record keeps track of legitimate addresses for your domain, to be compared when accessed. […]
Key Exchange Parameters
Additionally, to have a strong Key Algorithm, it is important to have robust Key Parameters as well. These parameters determine the length and complexity of your generated code and are essential to set them to a high complexity configuration because even strong systems can be weak if settings are too simple. […]
Cipher Availability
In the security process, Cipher Suite is the system you want to implement with the combination of parts necessary to keep your website safe. While you can have all your steps for verification set on your connection, a weak Cipher Suite skips your efforts, just like having a vault door placed on a cardboard safe… On the other […]