Blog

Microsoft moved SNDS to a new URL, expired automated access links after 30 days, added a REST API, and tightened JMRP. Here's what to fix in monitoring.

Every publicly trusted certificate is logged to CT logs, so any certificate issued for your domain is public. Here's how to monitor for unauthorized issuance.

STARTTLS is opportunistic, so a downgrade attack can strip encryption silently. MTA-STS lets you publish a policy requiring TLS for delivery to your domain.

Adding IPv6 to email infrastructure brings blind spots: IPv6 starts with zero reputation, blacklisting works differently, and many setups only check IPv4.

The DMARCbis spec is finalized as three separate RFCs. Here's what changed, what got removed, and what it means for your email authentication setup.

SPF, DKIM, and DMARC are table stakes. Inbox placement is driven by IP and domain reputation, engagement, list hygiene, and sending patterns. What matters most.