Email diagnostic
SPF, DKIM and DMARC
SPF lists permitted senders, DKIM adds a cryptographic signature, and DMARC checks alignment with the visible From domain and publishes a handling policy. Together they reduce spoofing when configured correctly.
Transport and setup records
MTA-STS can enforce TLS expectations for inbound mail, while TLS-RPT collects reports about TLS delivery failures. Autodiscover and Autoconfig help mail clients find account settings. BIMI is an optional brand-logo mechanism and is not itself an authentication method.
Want interpretation?
Use the email deliverability checker for provider detection, priorities, explanations and configuration examples tailored to the domain you enter.