July 18, 2026
DMARC forensic reports (RUF) and privacy: what to know
DMARC RUF reports can contain personal data from senders. What RUF contains, why few ISPs still send them, and how to stay GDPR-compliant.
Read →Blog — page 9
July 17, 2026
ri= in DMARC: reporting frequency and what it changes
The DMARC ri= tag requests a reporting interval that ISPs largely ignore. What it means, the values seen in the wild, and why 86400 is the standard.
Read →July 16, 2026
The best tools to analyze DMARC reports
DMARC reports are raw XML. Tools exist to aggregate, visualize and turn them into an action plan. An overview of free and paid options, and how to choose.
Read →July 15, 2026
How to read a DMARC RUA report (and what it reveals)
A DMARC RUA report is a compressed XML file. This guide dissects the structure, decodes each useful tag, and turns that XML into an action plan.
Read →July 15, 2026
SPF macros and the exists mechanism: going beyond the 10-lookup limit
SPF macros with the exists mechanism authorize unlimited IPs in one DNS lookup, the only real way past the limit of 10. How it works, what it costs.
Read →July 14, 2026
DMARC reports: RUA vs RUF, what's the difference?
DMARC RUA reports aggregate statistics, RUF detail a single failed message. Contents, who still sends them, privacy risks, and which one truly matters.
Read →July 13, 2026
How to verify the DKIM signature of an email
Verifying a DKIM signature: reading the DKIM-Signature header and Authentication-Results, checking alignment, and why a valid signature can fail.
Read →July 12, 2026
DKIM 1024 or 2048 bits: which key size to choose
2048 bits is today’s DKIM standard and 1024 is on borrowed time. The DNS 255-character trap, and migrating an old key without breaking signatures.
Read →July 11, 2026
DKIM key rotation: why, when and how (without breaking anything)
Rotating DKIM keys limits the impact of a leak. The dual-selector method, the right frequency, and the trap of retiring the old selector too early.
Read →July 10, 2026
How to generate a DKIM key (and publish the right one)
Generating a DKIM key means a private/public pair: one kept secret, the other published in DNS. The steps, the key-size choice, and the alignment trap.
Read →