Freddie Leeman

64 Followers
14 Following
249 Posts
Geek, dad, entrepreneur, security enthusiast
Bloghttps://www.freddieleeman.nl
Twitter@freddieleeman
Projecthttps://learnDMARC.com
Projecthttps://URIports.com
Projecthttps://SmartHomeGeeks.io

DMARCbis replaces the PSL with DNS Tree Walk: What's the Difference? https://www.uriports.com/blog/dmarcbis-dns-tree-walk/

#DMARC #DMARCbis #DNS

DMARCbis Replaces the PSL with DNS Tree Walk: What's the Difference?

A central concept in DMARC is the Organizational Domain. It plays two key roles: 1. It defines the fallback domain used to look up a DMARC policy when no DMARC record is found at the exact domain from the "From" header. 2. It provides the domain against which relaxed alignment

URIports Blog

Ever wonder what email servers are doing behind the scenes? At https://LearnDMARC.com, we turned the confusing world of email authentication into a visual story.

📡 Watch servers talk it out.
🎯 Take the DMARC quiz.
📬 Paste email headers.

Perfect for learners, IT pros, and anyone who’s ever yelled “WHY is SPF failing?!” Best of all? It’s free, and your data isn’t stored or used for anything beyond creating the visualization.

#EmailSecurity #DMARC #LearnDMARC #EmailAuthentication #SPF #DKIM #URIports

Learn and test SPF, DKIM and DMARC

Visualize, analyze and improve your email authentication setup

Google DMARC reports are back! After going quiet since April 13, Google has resumed sending DMARC aggregate reports as of 19:15 UTC today. So far, the reports only include data from yesterday (April 16), but it is a good sign that things are starting to flow again.

#DMARC #EmailSecurity #Google

Since December 11th, Comcast DMARC aggregate reports have shown irregularities. If you're a system administrator noticing a dip in reports, rest assured this is not an issue on your end. The problem lies with Comcast’s reporting system, which we hope is being addressed promptly.
Ever wanted to make a podcast but sound more “squeaky toy” than “smooth radio,” or don’t have friends to co-host? Same here. Today, I let Google's NotebookLM turn my blog on Email Authentication into a podcast for those who’d rather listen than read. After a few tweaks, it’s surprisingly good. What do you think?
Did anyone else notice that Microsoft stopped sending DMARC aggregate reports (again) as of 2024-04-17 19:39 UTC?

I purged over a million DMARC reports from GoDaddy from our database because they incorrectly indicated SPF passed without identifier alignment. These erroneous reports were misleading our clients. I reported this issue some time ago, but it has yet to be addressed. We will continue to disregard these incorrect reports until the issue is resolved.

If you're using a DMARC monitoring solution other than URIports.com and notice unknown IP addresses passing SPF validation in GoDaddy DMARC reports, please understand that this is due to a known bug and is not cause for concern.

Microsoft (Outlook.com and Outlook Enterprise) has ceased issuing DMARC reports. We observed an 85% reduction from the 22nd of February and a further 99% decrease from the 23rd. As of yesterday, we haven't processed any reports from them.
For RFC compliance, a DMARC policy must place its Requested Mail Receiver policy (`p=`) as the second component. 0.5% of domains with a DMARC policy have misplaced the `p=` component, a detail often missed by popular online record validators. https://uriports.com/tools?method=dmarc&domain=telegra.ph
Check SPF, DMARC, DKIM, and MTA-STS. We validate syntax, check for RFC compliance and make suggestions.

URIports. Real-time reporting for websites and email

URIports
We've added a 'copy to clipboard' feature to http://learnDMARC.com with data anonymization, enabling easy sharing of results on social platforms for collaborative, privacy-conscious problem-solving.
Learn and Test DMARC

Learn and Test DMARC