Skip to main content

Software with a long life.

business@kashvish.com
Software with a long life.

Tool 02 / public records

Are your email authentication records published?

Reads the TXT records a domain publishes for SPF, DMARC and, when you add a selector, DKIM.

Worth knowing

This reads published records for the domain you enter. It does not follow SPF recursion, sign a DKIM message, or check alignment and organizational domain policy.

How to read the result

  • SPF should end in a hard or soft fail, not stay open to +all.
  • DMARC needs at least p=none before you tighten it, and rua= to get reports.
  • DKIM is per selector. The selector has to match the one your sender uses.
The sending domain, for example example.com.
Optional. Fill it in when you know the selector your mail service signs with, such as mail or s1.