3 ms·
This is a good idea. I use a catch-all domain for receiving mail. I never thought to set up DMARC & SPF until I received an email from a scammer attempting to i
by dibt 4y ago
This is a good idea. I use a catch-all domain for receiving mail. I never thought to set up DMARC & SPF until I received an email from a scammer attempting to impersonate the domain, but not any of the names I've used. I wonder also if it could impact the reputation/value of parked domains.
The article didn't mention Google's PostMaster tools:
https://gmail.com/postmaster/ https://gmail.com/postmaster/
This can give you a hint if your non-mail domain is being used elsewhere. I think it goes back 90-ish days, even before you had it set up.
- XCSme 4y agoI wonder if the default policy shouldn't be rejecting all email unless DMAR/SPF/DKIM is set up. I mean, email clients already mark non-authenticated emails as dangerous, that helps.
- habibur 4y agoJust learnt of postmaster.google. Most useful information today. Thank you.
- blitzar 4y ago"No data to display at present. Please come back later." I have never ever seen anything but this - given they are very low volume domains I assume this means they are not being abused (although the dmarc reports for at least one of them have 5-10 rejected attempts each day)