July 24, 2026
Configuring SPF and DKIM at Gandi
GandiMail, LiveDNS, the _mailcust.gandi.net include, the gm1 to gm3 DKIM selectors: the complete path to authenticating email for a domain hosted at Gandi.
Read →July 24, 2026
GandiMail, LiveDNS, the _mailcust.gandi.net include, the gm1 to gm3 DKIM selectors: the complete path to authenticating email for a domain hosted at Gandi.
Read →July 23, 2026
Ready-to-paste DMARC record templates — monitoring, quarantine, reject, parked domain — with per-provider settings and the publishing pitfalls to avoid.
Read →July 23, 2026
OVHcloud MX Plan, Email Pro and Exchange each need their own SPF and DKIM records. The DNS zone, the default SPF trap, CNAME selectors, checks.
Read →July 22, 2026
Hardening the root domain isn't enough if the subdomains stay open. How the sp and np tags close that side door — including non-existent subdomains.
Read →July 21, 2026
The pct tag hardened DMARC in percentage steps. DMARCbis removed it. Here's how to run a safe, gradual rollout without it.
Read →July 20, 2026
The two enforcing DMARC policies don't share the same risk profile. What each actually does to failing mail, and how to decide for a given domain.
Read →July 19, 2026
The conditions to meet before hardening a DMARC policy from p=none to p=reject: a pre-flight checklist for enforcement with no legitimate mail lost.
Read →July 18, 2026
DMARC RUF reports can contain personal data from senders. What RUF contains, why few ISPs still send them, and how to stay GDPR-compliant.
Read →July 17, 2026
The DMARC ri= tag requests a reporting interval that ISPs largely ignore. What it means, the values seen in the wild, and why 86400 is the standard.
Read →July 16, 2026
DMARC reports are raw XML. Tools exist to aggregate, visualize and turn them into an action plan. An overview of free and paid options, and how to choose.
Read →