Re:Tell HN: Make sure to configure DKIM/SPF with Fastmail
by janto on Sunday March 27, 2022 @06:15PM
(#30824695)
Amusing :) Although I have to admit that I am even less sure after using that site. There doesn't seem to be an indication that DKIM "FAIL" in red is a good or bad thing after it attempted to spoof a domain I own. I assume it's good?
[ Parent
| on HN ]
Re:Tell HN: Make sure to configure DKIM/SPF with Fastmail
by freddieleeman on Tuesday March 29, 2022 @08:19AM
(#30841549)
A spoofed message should FAIL DMARC. It could PASS DKIM and if the signature came from a domain that is owned by the attacker. But DMARC will fail when the DKIM domain and the HEADER.FROM domain do not align.
Please read my blog here: https://www.uriports.com/blog/introduction-to-spf-dkim-and-d...
It will explain how SPF, DKIM, and DMARC work together to prevent spam.
Re:Tell HN: Make sure to configure DKIM/SPF with Fastmail
by climb_stealth on Sunday March 27, 2022 @06:45PM
(#30824923)
Not sure, I can't say I'm super familiar with this. Which I guess is part of the reason I'm having it configured through Fastmail.
This is the original submission where the link came from if it helps: