August 16, 2026
How long does it take to reach p=reject?
What drives the timeline to p=reject: estate size, third-party sources, correction cadence, observation window. Realistic ranges, phase by phase.
Read →Blog — page 5
August 15, 2026
The DMARC checklist 2026: from zero to p=reject
Ten ordered steps from an unprotected domain to p=reject, updated for DMARCbis: Tree Walk, np, the t= test mode. Each step links to its deep guide.
Read →August 14, 2026
Protecting a parked or no-email domain (p=reject)
A domain that sends no email is still spoofable. Three DNS records lock it down: an SPF authorising no one, DMARC p=reject at once, a revoked DKIM key.
Read →August 13, 2026
BIMI without VMC: is it possible (and is it a good idea)?
A BIMI record without a VMC is valid, yet Gmail and Apple display nothing without a certificate. What a bare record delivers, and the CMC alternative.
Read →August 13, 2026
The VMC certificate for BIMI: price, requirements and how to get one
The VMC binds a BIMI logo to a registered trademark and unlocks its display in Gmail. Real cost, the trademark requirement, the process step by step.
Read →August 11, 2026
BIMI: displaying a brand's verified logo in Gmail and beyond
BIMI shows a brand's verified logo beside its emails, but only at DMARC enforcement. What it is, how the record is published, why p=reject comes first.
Read →August 10, 2026
DMARC for e-commerce: deliverability and trust on the same line
An online shop plays two stakes on its domain: transactional deliverability and customer trust against spoofing. DMARC serves both — why and how.
Read →August 10, 2026
DMARC for healthcare: a heavily spoofed sector, often poorly protected
DMARC in healthcare: hospitals, labs and insurers pair sensitive data with instant trust — ideal for spoofing. What the figures show, what NIS2 demands.
Read →August 08, 2026
DMARC for the public sector: a domain citizens take at face value
DMARC in the public sector: councils and agencies are among the most spoofed and least protected senders. Why they are targeted, and a thin-means roadmap.
Read →August 07, 2026
DNSSEC and DMARC: the foundation under email authentication
SPF, DKIM and DMARC all live in DNS. Without DNSSEC, poisoned resolution can serve a permissive SPF or erase the policy. What zone signing protects.
Read →