Details

Written by: sekhemre

Category: Uncategorised

Published: 07 December 2024

Hits: 103

To remain compliant with standards and ensure email deliverability, we have implemented the following in our email server.

1. SPF - Sender Policy Framework
2. DKIM - DomainKeys Identified Mail
3. DMARC -  Domain-based Message Authentication, Reporting, and Conformance
4. ARC - Authenticated Received Chain

Initial testing confirms that each of these additions is fully functional. Email headers may be lengthy with this current setup, as multiple checks are done. SPF is initially checked, and a header is added to show the results. Next, DKIM is checked, and headers are added to include the results. DMARC then rechecks both SPF and DKIM and adds even more headers. Finally, ARC comes in, adds its own headers, and preserves the results from the first 3 steps. This is needed because some mail servers alter the headers, thus making SPF, DKIM, or DMARC fail when they initially passed. With ARC, those initial results are preserved, and any alterations done by other mail servers must also include that server's ARC headers. This allows the email recipient to correctly see the chain of custody for their specific email and all the authentication results. 

This setup will allow us to properly send emails to any server on the Internet. As each server has its own security requirements, having our server support all authentication methods ensures greater reliability and security for any mail sent through it. This also has the added benefit of reducing spam.