September 12, 2025 at 4:56 PM
lol nobody at my company would even see this shit if it fails dmarc (which is basically dkim + spf and is the very basic 'im not spam' signifier in 2025)
DOGE has been sending their mass emails from a misconfigured server, causing DOGE emails to fail SPF (Sender Policy Framework) validation.
This means that agencies are probably marking DOGE emails as spam.
This means that agencies are probably marking DOGE emails as spam.
I am hearing from gov employees who got the OPM email but won't open it because it seems so shady. Things are going great.
February 22, 2025 at 10:32 PM
lol nobody at my company would even see this shit if it fails dmarc (which is basically dkim + spf and is the very basic 'im not spam' signifier in 2025)
DKIM discourse is wild. Nerds see a cryptographically verifiable signature, assume it's just fuckin' rad that it exists, defend it with their lives. An hour after the email has been delivered, who does DKIM benefit? Is it possible the answer is LITERALLY "nobody but attackers"? I think it might be.
January 8, 2025 at 9:08 PM
DKIM discourse is wild. Nerds see a cryptographically verifiable signature, assume it's just fuckin' rad that it exists, defend it with their lives. An hour after the email has been delivered, who does DKIM benefit? Is it possible the answer is LITERALLY "nobody but attackers"? I think it might be.
listening on localhost instead of 0.0.0.0: drink
missing ca-certificates: drink
DKIM broke overnight: go to bed
missing ca-certificates: drink
DKIM broke overnight: go to bed
January 28, 2026 at 2:22 AM
listening on localhost instead of 0.0.0.0: drink
missing ca-certificates: drink
DKIM broke overnight: go to bed
missing ca-certificates: drink
DKIM broke overnight: go to bed
I know America is burning but incredible things are happening on the NANOG mailing list
![Re: SPF/DKIM/DMARC et.al.:
REALLY LONG [was: is it just me or...]
Sir, this is a Wendy's.](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:xraomsuf6pvh7r2cqtdwhkvm/bafkreibspuuahdnatzigivd45ythr2ffoyvafmjwjirtpdte5ujvrzkbkm)
July 4, 2025 at 1:09 AM
I know America is burning but incredible things are happening on the NANOG mailing list
DMARC, DKIM, et SPF, un testeur bien pratique
dmarcchecker.app/
dmarcchecker.app/
June 4, 2025 at 11:00 AM
DMARC, DKIM, et SPF, un testeur bien pratique
dmarcchecker.app/
dmarcchecker.app/
Wie viel haben DMARC, SPF und DKIM zum Kampf gegen Spam beigetragen?
DKIM erkennt Manipulationen an E-Mails, was für die meisten Mailserver in der Regel kein Problem darstellt.
DKIM erkennt Manipulationen an E-Mails, was für die meisten Mailserver in der Regel kein Problem darstellt.
June 18, 2026 at 9:07 AM
Wie viel haben DMARC, SPF und DKIM zum Kampf gegen Spam beigetragen?
DKIM erkennt Manipulationen an E-Mails, was für die meisten Mailserver in der Regel kein Problem darstellt.
DKIM erkennt Manipulationen an E-Mails, was für die meisten Mailserver in der Regel kein Problem darstellt.
Unlikely a kid called Big Balls knows about DKIM either
DOGE has been sending their mass emails from a misconfigured server, causing DOGE emails to fail SPF (Sender Policy Framework) validation.
This means that agencies are probably marking DOGE emails as spam.
This means that agencies are probably marking DOGE emails as spam.
I am hearing from gov employees who got the OPM email but won't open it because it seems so shady. Things are going great.
February 23, 2025 at 3:41 PM
Unlikely a kid called Big Balls knows about DKIM either
NOUVELLE VIDEO ! 🎉
Aujourd'hui j'vous parle de quatre jeux Dreamcast, du plus populaire au plus niche. Avec comme d'habitude mon avis, mais surtout l'histoire et les anecdotes de leur développement pas toujours évident. 🤖🚕🧟🗼
www.youtube.com/watch?v=DKIm...
www.youtube.com/watch?v=DKIm...
(RT Svp)
Aujourd'hui j'vous parle de quatre jeux Dreamcast, du plus populaire au plus niche. Avec comme d'habitude mon avis, mais surtout l'histoire et les anecdotes de leur développement pas toujours évident. 🤖🚕🧟🗼
www.youtube.com/watch?v=DKIm...
www.youtube.com/watch?v=DKIm...
(RT Svp)
4 JEUX FASCINANTS et ÉTRANGES de la Dreamcast (pas ceux que tu crois)
YouTube video by Spyounet
www.youtube.com
December 8, 2024 at 4:01 PM
NOUVELLE VIDEO ! 🎉
Aujourd'hui j'vous parle de quatre jeux Dreamcast, du plus populaire au plus niche. Avec comme d'habitude mon avis, mais surtout l'histoire et les anecdotes de leur développement pas toujours évident. 🤖🚕🧟🗼
www.youtube.com/watch?v=DKIm...
www.youtube.com/watch?v=DKIm...
(RT Svp)
Aujourd'hui j'vous parle de quatre jeux Dreamcast, du plus populaire au plus niche. Avec comme d'habitude mon avis, mais surtout l'histoire et les anecdotes de leur développement pas toujours évident. 🤖🚕🧟🗼
www.youtube.com/watch?v=DKIm...
www.youtube.com/watch?v=DKIm...
(RT Svp)
What happens when DMARC reporters skip #DKIM selectors? DKIM selectors act as labels, helping email servers verify a sender’s public key and distinguish between multiple #DKIM keys. Learn why DKIM selectors are essential for effective #DMARC reporting: https://buff.ly/4hX9B6e
February 17, 2025 at 3:00 PM
What happens when DMARC reporters skip #DKIM selectors? DKIM selectors act as labels, helping email servers verify a sender’s public key and distinguish between multiple #DKIM keys. Learn why DKIM selectors are essential for effective #DMARC reporting: https://buff.ly/4hX9B6e
Has anyone sent a resign email from potus@whitehouse.gov because they aren’t going to be checking dkim or spf are they?
January 29, 2025 at 1:36 AM
Has anyone sent a resign email from potus@whitehouse.gov because they aren’t going to be checking dkim or spf are they?
Vorsicht!
Auch wenn die Absenderadresse von Rossmann richtig aussieht, ist die DKIM ungültig!
Auch wenn die Absenderadresse von Rossmann richtig aussieht, ist die DKIM ungültig!
April 17, 2025 at 9:18 AM
Vorsicht!
Auch wenn die Absenderadresse von Rossmann richtig aussieht, ist die DKIM ungültig!
Auch wenn die Absenderadresse von Rossmann richtig aussieht, ist die DKIM ungültig!
Wie man Cybersicherheit NICHT macht: Episode 4711 🔥 🙄
#KRITIS Sektor #IT und #TK
"I reported an insecure DKIM key to Deutsche Telekom / T-Systems. They first asked me to further explain things (not sure why 'Here's your DKIM private key' needs more explanation, but whatever...)..."
#KRITIS Sektor #IT und #TK
"I reported an insecure DKIM key to Deutsche Telekom / T-Systems. They first asked me to further explain things (not sure why 'Here's your DKIM private key' needs more explanation, but whatever...)..."
April 16, 2026 at 9:44 AM
Un excellente synthèse sur la délivrabilité des emails - SPF, DKIM et DMARC.
www.xomedia.io/a-dee...
www.xomedia.io/a-dee...
June 24, 2025 at 11:00 AM
Un excellente synthèse sur la délivrabilité des emails - SPF, DKIM et DMARC.
www.xomedia.io/a-dee...
www.xomedia.io/a-dee...
No DMARC policy and a SoftFail SPF policy? Here is a link to email authentication best practices: www.uriports.com/blog/spf-dki...
SPF, DKIM, and DMARC Best Practices
Reduce spoofing and phishing, build and maintain a solid reputation, and increase email deliverability with SPF, DKIM, and DMARC.
www.uriports.com
March 6, 2025 at 10:23 AM
No DMARC policy and a SoftFail SPF policy? Here is a link to email authentication best practices: www.uriports.com/blog/spf-dki...
European Commission (320.67 GB)
Approximately 350 gigabytes of emails and attachments, full SSO user directory, DKIM signing keys, NextCloud/Athena data, and internal admin URLs from dozens of EU institutions.
ddosecrets.org/article/euro...
Help us keep publishing: donorbox.org/ddosecrets
Approximately 350 gigabytes of emails and attachments, full SSO user directory, DKIM signing keys, NextCloud/Athena data, and internal admin URLs from dozens of EU institutions.
ddosecrets.org/article/euro...
Help us keep publishing: donorbox.org/ddosecrets
European Commission - Distributed Denial of Secrets
Approximately 350 gigabytes of emails and attachments, full SSO user directory, DKIM signing keys, AWS config snapshots, NextCloud/Athena data, and internal admin URLs from dozens of EU institutions.…
ddosecrets.org
May 16, 2026 at 7:02 PM
European Commission (320.67 GB)
Approximately 350 gigabytes of emails and attachments, full SSO user directory, DKIM signing keys, NextCloud/Athena data, and internal admin URLs from dozens of EU institutions.
ddosecrets.org/article/euro...
Help us keep publishing: donorbox.org/ddosecrets
Approximately 350 gigabytes of emails and attachments, full SSO user directory, DKIM signing keys, NextCloud/Athena data, and internal admin URLs from dozens of EU institutions.
ddosecrets.org/article/euro...
Help us keep publishing: donorbox.org/ddosecrets
💥 Cold email tips:
Authenticate every domain.
SPF, DKIM, DMARC.
Send yourself a test email and check the headers.
No auth = straight to spam.
Authenticate every domain.
SPF, DKIM, DMARC.
Send yourself a test email and check the headers.
No auth = straight to spam.
September 26, 2026 at 12:02 PM
💥 Cold email tips:
Authenticate every domain.
SPF, DKIM, DMARC.
Send yourself a test email and check the headers.
No auth = straight to spam.
Authenticate every domain.
SPF, DKIM, DMARC.
Send yourself a test email and check the headers.
No auth = straight to spam.
is there a version of this infographic that also includes SPF, DKIM, and DMARC?
July 21, 2026 at 6:50 PM
is there a version of this infographic that also includes SPF, DKIM, and DMARC?
Comprendre et visualiser comment vos emails cheminent sur le Net (SPF, DKIM, DMARC) : learndmarc.com
October 11, 2023 at 8:40 PM
Comprendre et visualiser comment vos emails cheminent sur le Net (SPF, DKIM, DMARC) : learndmarc.com
"Then they told me it's out of scope for their bugbounty.
I guess then there's really no reason not to tell you: They have a 384 bit RSA DKIM key configured at: dkim._domainkey.t-systems.nl
384 bit RSA is... how shall I put it? I think 512 bit is the lowest RSA key size that was ever..."
I guess then there's really no reason not to tell you: They have a 384 bit RSA DKIM key configured at: dkim._domainkey.t-systems.nl
384 bit RSA is... how shall I put it? I think 512 bit is the lowest RSA key size that was ever..."
badkeys (@badkeys@infosec.exchange)
I reported an insecure DKIM key to Deutsche Telekom / T-Systems. They first asked me to further explain things (not sure why 'Here's your DKIM private key' needs more explanation, but whatever...). Th...
infosec.exchange
April 16, 2026 at 9:44 AM
"Then they told me it's out of scope for their bugbounty.
I guess then there's really no reason not to tell you: They have a 384 bit RSA DKIM key configured at: dkim._domainkey.t-systems.nl
384 bit RSA is... how shall I put it? I think 512 bit is the lowest RSA key size that was ever..."
I guess then there's really no reason not to tell you: They have a 384 bit RSA DKIM key configured at: dkim._domainkey.t-systems.nl
384 bit RSA is... how shall I put it? I think 512 bit is the lowest RSA key size that was ever..."
Another day, another IT person sends me an IMAGE of a 40+ character random string for me to add to their DNS record.
"Is that an O or a 0? Is that a 1 an l or an I? FFS! Suck my DKIM!"
"Is that an O or a 0? Is that a 1 an l or an I? FFS! Suck my DKIM!"
August 31, 2026 at 2:45 PM
Another day, another IT person sends me an IMAGE of a 40+ character random string for me to add to their DNS record.
"Is that an O or a 0? Is that a 1 an l or an I? FFS! Suck my DKIM!"
"Is that an O or a 0? Is that a 1 an l or an I? FFS! Suck my DKIM!"
Comprendre SPF, DKIM, DMARC (P)
Une analyse visuelle de la façon dont les serveurs de messagerie communiquent, vous donnant une meilleure compréhension de SPF, DKIM et DMARC et de la façon dont ils fonctionnent ensemble.
👉 learndmarc.com
Une analyse visuelle de la façon dont les serveurs de messagerie communiquent, vous donnant une meilleure compréhension de SPF, DKIM et DMARC et de la façon dont ils fonctionnent ensemble.
👉 learndmarc.com
April 9, 2025 at 6:11 PM
Comprendre SPF, DKIM, DMARC (P)
Une analyse visuelle de la façon dont les serveurs de messagerie communiquent, vous donnant une meilleure compréhension de SPF, DKIM et DMARC et de la façon dont ils fonctionnent ensemble.
👉 learndmarc.com
Une analyse visuelle de la façon dont les serveurs de messagerie communiquent, vous donnant une meilleure compréhension de SPF, DKIM et DMARC et de la façon dont ils fonctionnent ensemble.
👉 learndmarc.com
Every time I ask the public to send in emails, a number of them end up in the junk/spam folder. Without fail.
And I don't want your emails to end up in anyone's spam folder.
First step is to check if your SPF, DKIM, and DMARC are setup correctly.
www.cloudflare.com/learning/ema...
And I don't want your emails to end up in anyone's spam folder.
First step is to check if your SPF, DKIM, and DMARC are setup correctly.
www.cloudflare.com/learning/ema...
What are DMARC, DKIM, and SPF?
SPF, DKIM, and DMARC help prevent spam and authenticate email senders by verifying where emails come from. Learn how SPF, DKIM, and DMARC work.
www.cloudflare.com
March 25, 2025 at 4:53 PM
Every time I ask the public to send in emails, a number of them end up in the junk/spam folder. Without fail.
And I don't want your emails to end up in anyone's spam folder.
First step is to check if your SPF, DKIM, and DMARC are setup correctly.
www.cloudflare.com/learning/ema...
And I don't want your emails to end up in anyone's spam folder.
First step is to check if your SPF, DKIM, and DMARC are setup correctly.
www.cloudflare.com/learning/ema...
There's also 1700 sites among the top 1M still using DKIM Keys < 1024 bits, apparently.
dmarcchecker.app/articles/cra...
dmarcchecker.app/articles/cra...
How We Cracked a 512-Bit DKIM Key for Less Than $8 in the Cloud
dmarcchecker.app
January 10, 2025 at 2:11 PM
There's also 1700 sites among the top 1M still using DKIM Keys < 1024 bits, apparently.
dmarcchecker.app/articles/cra...
dmarcchecker.app/articles/cra...