Can someone send email as you?

• Good

  DMARC

  p=reject

  Mail that fails the check is refused. This is the strongest setting.

  v=DMARC1; p=reject; adkim=r; aspf=r; rua=mailto:security@huttenlochertech.com
• Good

  SPF

  ends in -all

  Your record lists who may send and fails everyone else (-all). That's the strictest setting.

  v=spf1 -all
• Good

  DKIM

  Found (resend)

  Your mail carries a signature that proves it came from your provider and wasn't changed on the way. With DMARC enforced, this is what keeps your own mail passing.

• Good

  MTA-STS

  Published

  Mail sent to you has to arrive over an encrypted connection, so someone sitting on the network between two mail servers can't read or quietly reroute it.

• Good

  TLS reports

  Published

  Mail providers send you a daily report when they couldn't deliver to you securely, so a broken certificate or a downgrade attempt doesn't go unnoticed.

• Note

  BIMI

  Not set up

  Brand logos next to mail in Gmail, Apple Mail and Yahoo. It only works once DMARC is enforced, and it makes your real mail look different from a forgery.

  What to change: Publish a TXT record at default._bimi.huttenlochertech.com pointing to your logo as an SVG. Gmail also wants a mark certificate (VMC or CMC).

• Note

  Mail

  Receives mail

  Mail for huttenlochertech.com is handled by inbound-smtp.us-east-1.amazonaws.com.

This reads public DNS at the moment you ran it. A mailbox also checks things we can't see from outside, such as whether a particular message was really signed. If you handle wires, earnest money or payments, read how closing firms stop wire fraud. Want it set up properly for you? That's part of Protect, or write to us.