Email security using SPF, DKIM and DMARC

Email security is core to our business at Databias and we have implemented all the protection protocols necessary to protect your email from threats like spam, phishing and email spoofing. There are three key layers that we use to protect your email from a data breach.

SPF or Sender Policy Framework (SPF) is a DNS TXT record that is part of your domain’s DNS records. It contains a list of all the IP addresses that are permitted to send email on behalf of your domain. This establishes a verified link between the email and your domain. Databias uses SPF records to prevent spammers from spoofing your domain name. Recipient’s mail servers use a domain’s SPF record to determine whether an email they have received has come from an authorised server or not.

DKIM, or Domain Keys Identified Mail (DKIM), is an email validation method designed to detect forged email contents, a technique often used in phishing attacks. DKIM allows the recipient’s mail server to check that an email’s contents has not been modified whilst in transit. It achieves this by affixing a digital signature at the time of sending, linked to a domain name, to each outgoing email message. The recipient’s mail server can then verify this by looking up the sender’s public key published in their DNS as a TXT record. DKIM signatures are not immediately visible to end-users and are affixed and verified by the underlying email infrastructure rather than the message’s authors and recipients.

DMARC or Domain-based Message Authentication, Reporting and Conformance, is a technical standard widely adopted today. DMARC email security provides a way for domain owners to outline their authentication practices and specify the actions to be taken when an email fails authentication. DMARC also provides a way for recipients to report back to a domain’s administrators when email fails authentication via SPF or DKIM.

Both SPF and DKIM provide different measures of email authenticity. DMARC provides the ability for a sender to publish a publicly accessible policy that specifies how a recipient’s mail server should handle SPF and DKIM failures as well as and a reporting mechanism for actions performed under those policies. Like SPF and DKIM, a DMARC policy is published in a sender’s DNS zone as a simple TXT record.

Databias can assist customers in setting up secure and reliable SPF, DKIM and DMARC records to ensure their domain’s security and improve email deliverability. Contact us today for more information on how we can help you.

Related KB articles