https://senderaudit.com/blog/en/tags/spf/Recent content in SPF on Sender Audit BlogHugoenSun, 26 Apr 2026 00:00:00 +0000https://senderaudit.com/blog/en/email-and-dns/Sun, 26 Apr 2026 00:00:00 +0000https://senderaudit.com/blog/en/email-and-dns/<p>DNS is the invisible foundation of email. Without the right records, your emails won&rsquo;t be delivered, authenticated, or encrypted. Here are <strong>all the DNS records</strong> a sending domain needs to know and configure.</p> <h2 id="overview">Overview</h2> <table> <thead> <tr> <th>Record</th> <th>Type</th> <th>Role</th> </tr> </thead> <tbody> <tr> <td><strong>MX</strong></td> <td>MX</td> <td>Where to deliver emails for your domain</td> </tr> <tr> <td><strong>SPF</strong></td> <td>TXT</td> <td>Who can send for your domain</td> </tr> <tr> <td><strong>DKIM</strong></td> <td>TXT/CNAME</td> <td>Public key for verifying signatures</td> </tr> <tr> <td><strong>DMARC</strong></td> <td>TXT</td> <td>SPF + DKIM alignment policy</td> </tr> <tr> <td><strong>MTA-STS</strong></td> <td>TXT + HTTPS</td> <td>Enforce TLS encryption</td> </tr> <tr> <td><strong>TLS-RPT</strong></td> <td>TXT</td> <td>Reports on TLS failures</td> </tr> <tr> <td><strong>BIMI</strong></td> <td>TXT</td> <td>Verified logo in the inbox</td> </tr> <tr> <td><strong>PTR</strong></td> <td>PTR</td> <td>Reverse DNS for your sending IPs</td> </tr> </tbody> </table> <h2 id="mx-where-to-deliver-emails">MX: Where to Deliver Emails</h2> <p>The MX (Mail Exchange) record specifies which servers receive emails for your domain.</p>https://senderaudit.com/blog/en/email-headers-explained/Mon, 20 Apr 2026 00:00:00 +0000https://senderaudit.com/blog/en/email-headers-explained/<p>Email headers contain the complete story of a message&rsquo;s journey: who sent it, which servers it passed through, whether authentication succeeded, and why it landed in spam. Knowing how to read them means knowing how to diagnose.</p> <h2 id="how-to-access-headers">How to Access Headers</h2> <ul> <li><strong>Gmail</strong>: open the email → ⋮ → &ldquo;Show original&rdquo;</li> <li><strong>Outlook</strong>: open the email → File → Properties → &ldquo;Internet headers&rdquo;</li> <li><strong>Apple Mail</strong>: View → Message → All Headers</li> <li><strong>Thunderbird</strong>: View → Message Source</li> </ul> <p>Or paste them directly into Sender Audit&rsquo;s <a href="https://senderaudit.com/header-analyzer">Header Analyzer</a> for a visual analysis.</p>https://senderaudit.com/blog/en/configure-spf/Sat, 17 Jan 2026 00:00:00 +0000https://senderaudit.com/blog/en/configure-spf/<p>SPF (Sender Policy Framework) is the first line of defense in email authentication. It lets you declare in your DNS which servers are allowed to send email for your domain. Simple on the surface, it hides subtleties that trip up even experienced admins.</p> <h2 id="what-does-spf-actually-do">What Does SPF Actually Do?</h2> <p>When a receiving server gets an email from <code>contact@yourdomain.com</code>, it asks one question: <em>&ldquo;Is this server allowed to send for this domain?&rdquo;</em></p>