| SPF | Sender Policy Framework
Specifies which mail servers are allowed to send for the domain
TXT → @ → v=spf1 ip4:1.1.1.1 include:_spf.google.com ~all TXT → @ → v=spf1 ip4:1.1.1.1 include:spf.protection.outlook.com -all |
| DKIM | Domain Keys Identified Mail
Includes digital signature in emails to prove it's really you
TXT → google._domainkey → v=DKIM1;k=rsa;p=XxXxXxXxXxXxXxXxXx... CNAME → selector1._domainkey → selector1-mycompany-com._domainkey.mycompany999.onmicrosoft.com. CNAME → selector2._domainkey → selector2-mycompany-com._domainkey.mycompany999.onmicrosoft.com. |
| DMARC | Domain Message Authentication, Reporting & Conformance
Tells mail servers what to do with suspected mail
TXT → _dmarc → v=DMARC1; p=none; TXT → _dmarc → v=DMARC1; p=quarantine; TXT → _dmarc → v=DMARC1; p=reject; |