Learn

Plain-English explanations of the standards that determine whether someone else can send email that looks like it's from your domain.

• Email spoofing explained — what it is and why it's possible.
• SPF — which servers are allowed to send for your domain.
• DKIM — cryptographically signing outgoing mail.
• DMARC — what receivers do when SPF/DKIM checks fail.
• DMARC reports — the aggregate data mailbox providers send back.
• Guides — Microsoft 365 and Google Workspace setup steps, plus SPF/DMARC record generators.