...
| Expand | |||||
|---|---|---|---|---|---|
| |||||
|
...
SPF - Procedure to follow
- SecuTix SECUTIX provides a list of authorized servers used to send emails on behalf of the institution mosamuseum
- The mosamuseum institution publishes a corresponding SPF record in its DNS
- create a SPF record:
...
- Check your SPF record. Several Web sites exist:
Setup DKIM
Introduction to DKIM
...
| Expand | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|
In this example, the DKIM signature included in the header of the email is:
|
...
For further reading, please refer to https://en.wikipedia.org/wiki/DomainKeys_Identified_Mail
DKIM -
...
Procedure to follow
- The customer opens a service support request in order to enable signature of outgoing emails
- SecuTix generates a pair of DKIM public/private key for two given selectors
- The mosamuseum institution add the two following DNS records in their zone (to enable updates of keys)
stxsel1._domainkey.mosamuseum.com. IN CNAME sel1-mosa._domainkey.dkim.secutix.com.
stxsel2._domainkey.mosamuseum.com. IN CNAME sel2-mosa._domainkey.dkim.secutix.com.
!!! Be careful to change:
domain name "mosamuseum.com" with the domain name which is defined in Sales Channels (Parameters => Sender email)
institution code "mosa" with the institution code
- The customer opens a service support request in order to enable signature of outgoing emails
- SECUTIX generates a pair of DKIM public/private key for two given selectors
SECUTIX SecuTix signs all emails sent with the DKIM private key. This signature is included in the header of the email.
Setup MX
See https://abnormalsecurity.com/glossary/mx-record, which includes "if you want to successfully deliver emails, you need an MX record".
Setup DMARC
Introduction to DMARC
DMARC, which stands for “Domain-based Message Authentication, Reporting & Conformance”, is an email authentication, policy, and reporting protocol. It builds on the widely deployed SPF and DKIM protocols, adding linkage to the author (“From:”) domain name, published policies for recipient handling of authentication failures, and reporting from receivers to senders, to improve and monitor protection of the domain from fraudulent email. Source: https://dmarc.org/.
DMARC - Procedure to follow
Due to recent changes to email handling by Google and Yahoo for anyone sending more than 5,000 emails daily, you should ensure that you have a DMARC record in your DNS settings.
If you don't know anything about DMARC, then we recommend you add the following DNS record:
- _dmarc.mosamuseum.com. IN TXT "v=DMARC1; p=none"
Please check afterwards with https://mxtoolbox.com/dmarc.aspx: it shouldn't include any errors (i.e. anything flagged with 
). Please also read https://support.google.com/a/answer/10032473 to progressively improve your DMARC record.