Blog articles

Deep dives, updates, and stories about DMARC, SPF, DKIM, and email authentication best practices. Stay up to date on how to keep your email secure and deliverable.

Cracking a 1024-bit DKIM Key Newest article

Cost, Timeline, and Why It's Closer Than You Think

Your DKIM public key is sitting in DNS right now. Anyone can read it. If you're still using a 1024-bit RSA key, the question isn't whether it can be cracked. It's how much it would cost. Let's do the math. NIST already called it NIST Special Publication...

Read full article

Latest articles

Manual DMARC Monitoring vs Automated Monitoring

A practical comparison of cost, visibility, risk, and operational ownership in modern email authentication

Most organizations treating DMARC as a set-and-forget task are operating blind. Here is what that actually costs, and why automated monitoring is not a nice-to-have. In this... read more

🇩🇪 Welche Hosting Anbieter unterstützen DMARC

Welche Hosting Anbieter DMARC standardmäßig unterstützen und worauf Sie achten sollten

DMARC ist kein Feature, das ein Hosting Anbieter „aktiviert“. DMARC ist ein DNS basiertes Protokoll, das der Domain Inhaber selbst veröffentlicht. Trotzdem gibt es große... read more

SMTP Smuggling

How a Subtle SMTP Parsing Flaw Enables Global Email Spoofing

SMTP smuggling is a newly identified email spoofing technique that exploits inconsistencies in SMTP parsing. Learn how it works, why it matters, and what organizations should do... read more

Cyber Insurance and DMARC Enforcement

Cyber insurance underwriting has changed. Quietly, but materially.

A few years ago, cybersecurity insurers focused on backups, endpoint protection, and incident response plans. Today, the conversation increasingly starts earlier in the attack... read more

A quiet Google update just made SPF more forgiving

How Google's SPF Lookup reduced from 4 to 1

In December, Google adjusted something deep in its email infrastructure. It was not announced widely and it did not come with action items. Most teams will never notice it... read more

DMARC for non sending domains

Do I need DMARC if I do not send email from this domain?

Yes. You still need DMARC even if you are not sending email from a domain. Not sending email does not protect you. It does the opposite. Domains without DMARC are easier to... read more

Is your domain really protected?

Enter your domain to run a live DMARC check and see how easy it for others to spoof your domain.

No sign-up required. Safe to try on any domain.