[ Knowledge Base ]
The email authentication knowledge base.
Expert guides to DMARC, SPF, DKIM, BIMI and transport security, setup steps for every sending service and DNS host, and the playbooks enterprises use to reach full enforcement.
Start here
What is Email Authentication?
How SPF, DKIM, DMARC, BIMI and MTA-STS fit together, in plain English.
Read Path 2What is DMARC?
The policy that decides what happens to mail that fails authentication.
Read Path 3Google and Yahoo Sender Requirements
The bulk-sender rules every domain now has to meet.
ReadProtocols & standards
DMARC, SPF, DKIM, BIMI, transport security and where the standards are heading.
DMARC foundations and policy
How DMARC works, how to choose and tighten a policy, and how to reach p=reject safely with alignment you can trust.
68 guides
SPF
Sender Policy Framework from first record to flattening: syntax, includes, the 10-lookup limit and safe changes.
55 guides
DKIM
Keys, selectors, signatures and rotation: everything you need to sign mail and keep DKIM aligned.
48 guides
BIMI and brand identity
Put your verified logo in the inbox: BIMI records, SVG Tiny-PS logos, VMC and CMC certificates.
40 guides
Transport security
Encrypt mail in transit with MTA-STS, TLS-RPT and DANE, and read the reports that prove it works.
40 guides
Standards and transitions
DMARCbis, RFC changes and protocol transitions: what changes, when, and how to move without breaking mail.
26 guides
Setup & publishing
Publish records with every sending service, DNS host and platform.
Sending-service implementation guides
Step-by-step SPF, DKIM and DMARC setup for every email platform, CRM, marketing tool and help desk that sends as your domain.
365 guides
DNS-provider publishing guides
Publish DMARC, SPF and DKIM records at your DNS host, with the exact screens and fields to use.
39 guides
DNS and domain infrastructure
The DNS underneath email authentication: TXT and CNAME records, propagation, subdomains, parked and inactive domains.
60 guides
Platform operating guides
How to run EmailAuth day to day: onboarding domains, approvals, deployment options and reporting.
20 guides
Troubleshooting & reporting
Read reports, decode headers and fix delivery errors.
Reporting and investigation
Turn RUA aggregate and RUF forensic reports into decisions: find every sender, spot abuse and prove progress.
63 guides
SMTP, headers and delivery errors
Decode bounce codes and message headers, and fix the authentication failures behind them.
47 guides
Forwarding and interoperability
Keep authentication intact through forwarding, mailing lists, gateways and ARC.
24 guides
Diagnostics and working resources
Checkers, generators, checklists and the glossary your team reaches for every day.
27 guides
Deliverability & abuse
Meet mailbox-provider rules and shut down impersonation.
Operations & automation
Run email authentication at enterprise scale, with agents doing the work.
Enterprise operations and lifecycle
Run email authentication across hundreds of domains: ownership, change control, vendor onboarding and ongoing governance.
55 guides
Agentic operations and automation
How AI agents enforce policy, align senders and remediate drift, with human approval and a full audit trail.
36 guides
MSP, APIs and integrations
Multi-tenant operations for MSPs and MSSPs, plus APIs and integrations with your security stack.
42 guides
Business & industry
Business value, industry scenarios and regional requirements.
Buying and business value
Build the business case: risk reduction, deliverability gains and how to evaluate platforms.
34 guides
Industries and operating scenarios
Email authentication for banks, government, healthcare, education and other high-stakes sectors.
36 guides
Regional requirements and research
Country and regulator requirements, plus research on email authentication adoption by region.
26 guides
Enterprise provenance
Why top financial institutions and governments retired their email security dashboards.
Traditional email authentication platforms sell you a dashboard and ask your engineers to do the labour. In high-stakes environments, manual oversight means delayed enforcement, configuration drift and unmonitored shadow domains.
EmailAuth is the agentic email provenance platform. Our agents enforce p=reject, keep third-party senders aligned and move your domains to full RFC 9989 compliance, the new DMARC standard,, with human-in-the-loop auditability.
SaaS · Dedicated tenancy · Air-gapped on-prem · BYOK encryption