DMARC

DKIM Explained

🔐 DKIM — DomainKeys Identified Mail

DomainKeys Identified Mail (DKIM) is an email authentication method that uses digital signatures to prove that an email was:

• Authorised by the owner of the sending domain
• Not altered in transit

DKIM uses public-key cryptography: the sender’s mail server signs parts of the message with a private key, and the recipient verifies the signature using a public key published in the sender’s DNS.

---





Sender Policy Framework

📡 Sender Policy Framework (SPF)

Sender Policy Framework (SPF) is an email authentication standard designed to prevent domain spoofing by verifying which mail servers are authorised to send emails for your domain.

It was introduced to fix a core flaw in SMTP — the protocol never verified the identity of the sender. SPF allows domain owners to publish a DNS record that specifies approved sending hosts, helping receiving mail servers identify forged messages.