DNS record review

waow

DKIM

DomainKeys Identified Mail, an email authentication method that helps prevent email spoofing by validating the sender's domain.

SPF

Sender Policy Framework is used to define which servers are authorized to send email on behalf of their domain. DNS TXT record.

How do the two encryption keys in DKIM work?

DKIM uses a pair of cryptographic keys: a private key, which is held by the sender and used to sign the email, and a public key, which is published in the sender's DNS records and used by the recipient to verify the email's authenticity.

What does DMARC do?

• It specifies what to do when a message fails SPF or DKIM checks

• Where to send reports about message authentication attempts

• How to handle subdomains

DMARC

Domain-based Message Authentication, Reporting, and Conformance, an email authentication protocol that builds on DKIM and SPF to give domain owners a way to protect their domain from unauthorized use.

MX

A DNS entry that specifies the mail server responsible for receiving email on behalf of a domain.

CNAME

A type of DNS record that maps an alias name to a true or canonical domain name, allowing multiple domain names to point to the same IP address.

A

DNS record that maps a FQDN (Fully qualified domain name) to an IP address. Multiple can exist for the same hostname - DNS servers typically return all of them, with the order rotated for each request (round-robin DNS)

AAAA

A type of DNS record that maps a domain name to an IPv6 address.

AAA (Framework)

Authentication, Authorization, Accounting