Email security insights, DMARC tutorials, and product updates https://www.dmarctrust.com/blog en-us Wed, 17 Jun 2026 10:17:00 -0000 Set up the Zendesk SPF record with include:mail.zendesk.com, merge it into your existing SPF record, avoid outdated includes, and verify DMARC. Wed, 17 Jun 2026 10:17:00 -0000 https://www.dmarctrust.com/blog/setup-spf-zendesk https://www.dmarctrust.com/blog/setup-spf-zendesk dmarc-setup Set up a Proofpoint SPF record for Proofpoint Essentials outbound mail, choose the correct regional include, merge it into one SPF record, and verify DMARC. Wed, 10 Jun 2026 10:23:00 -0000 https://www.dmarctrust.com/blog/setup-spf-proofpoint https://www.dmarctrust.com/blog/setup-spf-proofpoint dmarc-setup Set up Zendesk DKIM with two CNAME records, enable custom domain signing, avoid delivery failures, and verify DMARC alignment. Mon, 08 Jun 2026 10:16:00 -0000 https://www.dmarctrust.com/blog/setup-dkim-zendesk https://www.dmarctrust.com/blog/setup-dkim-zendesk dmarc-setup Set up Google Workspace DKIM by generating a key in the Admin console, publishing the DNS TXT record, turning on authentication, and verifying DMARC alignment. Wed, 03 Jun 2026 10:13:00 -0000 https://www.dmarctrust.com/blog/setup-dkim-google-workspace https://www.dmarctrust.com/blog/setup-dkim-google-workspace dmarc-setup Amazon SES SPF passes by default, but it does not align with DMARC unless you configure a custom MAIL FROM domain. Here is the exact setup. Mon, 01 Jun 2026 10:15:00 -0000 https://www.dmarctrust.com/blog/setup-spf-amazon-ses https://www.dmarctrust.com/blog/setup-spf-amazon-ses dmarc-setup Set up Amazon SES DKIM with Easy DKIM CNAMEs, understand when to pick BYODKIM or DEED, and avoid the per-region signing trap that breaks DMARC. Wed, 27 May 2026 10:15:00 -0000 https://www.dmarctrust.com/blog/setup-dkim-amazon-ses https://www.dmarctrust.com/blog/setup-dkim-amazon-ses dmarc-setup DMARC is now an IETF Standards Track protocol. RFC 9989, 9990, and 9991 replace RFC 7489 from 2015. Records still start with v=DMARC1, so most production deployments need nothing immediate. But the spec has real changes: new tags, the Public Suffix List is out, the p=reject guidance has flipped, and aggregate reports gained fields. Here is what changed and what to do about it. Tue, 26 May 2026 01:26:00 -0000 https://www.dmarctrust.com/blog/dmarcbis-rfc-9989-9990-9991 https://www.dmarctrust.com/blog/dmarcbis-rfc-9989-9990-9991 email-security A 2026 field guide to complaint feedback headers: Gmail Feedback-ID, Yahoo CFL enrollment, Microsoft SNDS/JMRP, Apple iCloud Mail, Comcast FBL, and RFC 9477 CFBL-Address. Sun, 24 May 2026 15:28:00 -0000 https://www.dmarctrust.com/blog/email-feedback-loop-headers-2026 https://www.dmarctrust.com/blog/email-feedback-loop-headers-2026 email-deliverability An honest shortlist of the 6 best DMARC monitoring services in 2026. Compares DMARCTrust, Valimail, dmarcian, EasyDMARC, PowerDMARC, and DMARCLY on pricing, data residency, DNS monitoring, and what each one is genuinely good at. Wed, 20 May 2026 13:26:00 -0000 https://www.dmarctrust.com/blog/best-dmarc-monitoring-service-2026 https://www.dmarctrust.com/blog/best-dmarc-monitoring-service-2026 vendor-comparison Set up HubSpot DKIM by connecting an email sending domain, publishing two CNAME records, reviewing SPF and DMARC, and verifying authentication. Wed, 20 May 2026 10:12:00 -0000 https://www.dmarctrust.com/blog/setup-dkim-hubspot https://www.dmarctrust.com/blog/setup-dkim-hubspot dmarc-setup An MX record is the DNS entry that tells the rest of the internet which mail servers receive email for a domain. Here is how MX records work, what each field means, and why priority matters. Mon, 18 May 2026 10:09:00 -0000 https://www.dmarctrust.com/blog/what-is-an-mx-record https://www.dmarctrust.com/blog/what-is-an-mx-record email-deliverability Phishing is broad impersonation. Spear phishing is targeted impersonation built around a specific person, role, vendor, or business process. Learn the difference, how executive phishing fits in, and where DMARC helps. Fri, 15 May 2026 10:09:00 -0000 https://www.dmarctrust.com/blog/phishing-vs-spear-phishing https://www.dmarctrust.com/blog/phishing-vs-spear-phishing email-security Set up DKIM for Office 365 and Microsoft 365 with selector CNAME records, the Defender portal, Exchange Online PowerShell checks, and DMARC alignment verification. Tue, 12 May 2026 10:08:00 -0000 https://www.dmarctrust.com/blog/setup-dkim-office-365 https://www.dmarctrust.com/blog/setup-dkim-office-365 dmarc-setup Three ways to look up MX records for any domain: a free MX records lookup tool, dig and nslookup from a terminal, and a few lines of Ruby or Python. Wed, 06 May 2026 10:04:00 -0000 https://www.dmarctrust.com/blog/how-to-look-up-mx-records https://www.dmarctrust.com/blog/how-to-look-up-mx-records free-tools email-deliverability Seeing queued in Gmail usually means your message is waiting in the Outbox because Gmail cannot send it yet. Here are the common causes, safe fixes, and when to check SPF, DKIM, or DMARC. Fri, 01 May 2026 10:06:00 -0000 https://www.dmarctrust.com/blog/gmail-queued-email-explained https://www.dmarctrust.com/blog/gmail-queued-email-explained email-deliverability Set up Mailchimp DKIM by verifying your domain, publishing Mailchimp's two CNAME records, adding DMARC, and checking authentication status. Wed, 29 Apr 2026 10:13:00 -0000 https://www.dmarctrust.com/blog/setup-dkim-mailchimp https://www.dmarctrust.com/blog/setup-dkim-mailchimp dmarc-setup Set up Salesforce DKIM by creating primary and alternate selectors, publishing CNAME records, activating the key, and verifying DMARC alignment. Tue, 21 Apr 2026 10:14:00 -0000 https://www.dmarctrust.com/blog/setup-dkim-salesforce https://www.dmarctrust.com/blog/setup-dkim-salesforce dmarc-setup Angler phishing is a social-media scam where fake support accounts target people who publicly ask brands for help. Learn how it works, how to verify support accounts, and how baiting and pharming differ. Wed, 15 Apr 2026 10:16:00 -0000 https://www.dmarctrust.com/blog/angler-phishing-explained https://www.dmarctrust.com/blog/angler-phishing-explained email-security MTA-STS breaks when DNS, HTTPS policy hosting, and MX TLS drift out of sync. This troubleshooting guide covers seven failures, the records to check first, and the commands that expose them. Thu, 09 Apr 2026 18:04:00 -0000 https://www.dmarctrust.com/blog/mta-sts-common-issues-troubleshooting https://www.dmarctrust.com/blog/mta-sts-common-issues-troubleshooting email-security DMARC secures who sends as your domain. Receiver Shield secures how mail is delivered to it. We added hosted MTA-STS and TLS-RPT monitoring to DMARCTrust. Thu, 02 Apr 2026 18:59:00 -0000 https://www.dmarctrust.com/blog/receiver-shield-mta-sts-tls-reporting https://www.dmarctrust.com/blog/receiver-shield-mta-sts-tls-reporting product-news email-security