plaintext 3 lines · 1 tab

Email security baseline with SPF DKIM and DMARC records

Kai Nakamura Apr 2026

1 tab

example.com.          IN TXT  "v=spf1 include:_spf.google.com -all"
default._domainkey    IN TXT  "v=DKIM1; k=rsa; p=MIIBIjANBgkqh..."
_dmarc.example.com.   IN TXT  "v=DMARC1; p=quarantine; rua=mailto:dmarc@example.com; adkim=s; aspf=s"

1 file · plaintext Explain with highlit

Email remains a major impersonation surface, so I want domain alignment controls in place even for engineering-led products. SPF alone is not enough, and DMARC without a rollout plan creates confusion. Monitoring mode first, then enforcement, is usually the least painful path.

Share this code

Here's the card — post it anywhere.

Email security baseline with SPF DKIM and DMARC records — share card

Link copied