Email Security: SPF, DKIM and DMARC
by Froga
Why a protocol with no authentication at all needed three bolted on afterwards — what each of the three actually checks, and which address a human reader is looking at.
You're previewing this room. Log in or create a free account to answer the questions and track your progress.
Study material
A domain owner publishes a DNS record listing which servers may send mail for that domain. The receiving server compares the connecting address against that list. It is a check on the sender's address, not on the message — SPF says nothing about whether the content was tampered with.
What does SPF check?
multiple choice
Whether the sending server's address is one the domain has authorised
Whether the message body has been altered
Whether the message is encrypted
Whether the recipient exists
Ready to test yourself?
Sign up free to answer, score points, and build your streak.