4 ms·
This was a great article and covered most of the things I've learned "the hard way" about SPF/DKIM/DMARC. My only beef is with this: > If you're running a lar
by josefresco 3y ago
This was a great article and covered most of the things I've learned "the hard way" about SPF/DKIM/DMARC.
My only beef is with this:
> If you're running a large domain, you'll get a bunch of these reports. If you're running a small one, you might be able to handle it yourself.
Even with a "small" domain, you're looking at basically another part time job to analyze these reports. It's not fun, and you grow tired of it very quickly. Sure if you're running 1 website, and that's all you do it might make sense. But for a web firm like mine (serving small biz), there's no way I can set this up for clients without charging them an extra fee and most aren't willing to pay me to spend several hours each week analyzing DMARC reports.
- thedougd 3y agoCheck out easydmarc and their brethren. I believe some have a free tier. They'll process the DMARC emails, generate dashboards, and send you alerts.
- josefresco 3y agoThank you for the referral. I've certainly played with several parsing and reporting services to help me decipher the XML files. The secondary problem is getting my clients to care enough to open their wallets! The only client (out of hundreds over 2+ decades) I've had with a major spoofing problem simply didn't have the budget.
- lazyweb 3y agoI set up something like this [1] a few years ago at a previous job, mostly just because the security team wanted an interactive dashboard. [1] https://github.com/debricked/dmarc-visualizer https://github.com/debricked/dmarc-visualizer
- turnsout 3y agoIn no way is it a part time job. You analyze the reports when you change where your mail is sent from (adding in Sendgrid or what have you), and once you confirm it’s working, you ignore the reports. If your email stops going through, you’ll hear about it before you ever get a DMARC report about it.