Trying to get my head around spf and dmarc. Once again trying to lessen my dependence on Google, but have my whole family hanging on the same domain which complicates things a bit
Conversation
Notices
-
Embed this notice
Anton Piatek (sldrant@mastodon.social)'s status on Friday, 31-Jan-2025 21:37:49 JST Anton Piatek
-
Embed this notice
Rich Felker (dalias@hachyderm.io)'s status on Friday, 31-Jan-2025 21:37:48 JST Rich Felker
@sldrant You can forget DMARC. It's not necessary, designed around corporate needs, and breaks participation in mailing lists. SPF is really easy, just allow the hostnames/IPs you want to allow to send mail with your domain on the envelope.
-
Embed this notice
Anton Piatek (sldrant@mastodon.social)'s status on Friday, 31-Jan-2025 22:46:13 JST Anton Piatek
@dalias spf does look straightforward. Dmarc I'm really not sure about, and dkim might be too far (or may have to move all family smtp to my server instead of their own Gmail etc, though not sure how they have it configured really)
-
Embed this notice
Rich Felker (dalias@hachyderm.io)'s status on Friday, 31-Jan-2025 22:46:13 JST Rich Felker
@sldrant DKIM I also dislike: it provides nonrepudiation, meaning if someone leaks your emails there's cryptographic proof of authenticity. Another corporate oriented, dubious for normal ppl thing. And you can totally do without it.
-
Embed this notice