News for hackers. Stuff that matters.

A comment on Email Authentication: A Developer's Guide.

Re:Email Authentication: A Developer's Guide by csharpminor on Friday August 25, 2023 @05:20PM (#37267201)
To be honest I found this article to be a bit blog spammy. It’s for developers because they used a startup accelerator analogy? I didn’t see anything particularly differentiated from the equivalent SendGrid/Mailgun/etc blogs that come up.

This is probably the best demo for understanding SPF/DKIM/DMARC that I’ve come across (I am not affiliated): https://www.learndmarc.com/

If you really want to understand DMARC check it out.

[ Parent | on HN ]
Re:Email Authentication: A Developer's Guide by jmholla on Saturday August 26, 2023 @12:38AM (#37269987)
I heavily agree. The analogy was distracting at best, confusing at worst. Just explaining what each feature does is perfectly grokkable. We all know what email is.
[ Parent | on HN ]
Re:Email Authentication: A Developer's Guide by freddieleeman on Saturday August 26, 2023 @09:15AM (#37272596)
Totally agree, this blog makes no sense at all.

"If a server isn't on the list, it's like an application being tossed out because it wasn't fully filled or the business idea is illegal."

Seriously, what?!

"DMARC establishes your policy as a sender for what should happen to your messages if they fail DKIM or SPF."

... only if they fail DKIM AND SPF (and alignment). The whole blog doesn't even talk about identifier alignment, which is a big part of DMARC.

Maybe an AI wrote the article and got stuck trying to use a weird analogy about a "competitive accelerator program" for email security? :)

[ Parent | on HN ]