[ Setup & publishing ]
Platform operating guides
How to run EmailAuth day to day: onboarding domains, approvals, deployment options and reporting.
20 guides
[ Core guides ]
[ All guides ]
Guide
Assess onmicrosoft sending restrictions by mail route
Assess Microsoft onmicrosoft sending restrictions using the sender, route, recipients and diagnostic. Keep custom-domain changes and tenant tests separate.
Guide
Diagnose Exchange Server delivery restrictions
Distinguish Exchange Server recipient permissions, size controls and throttling from authentication DNS, using route-specific diagnostics and explicit test gates.
Guide
Exchange Server DKIM: identify the component that performs outbound signing
Find the actual outbound signer for Exchange Server instead of applying Exchange Online commands to the wrong system.
Guide
Exim email authentication: map signing, policy checks and relay responsibilities
Separate Exim outbound signing from inbound authentication policy and relay authorisation.
Guide
Google Workspace aliases and secondary domains: verify SPF and DKIM alignment
Check authentication separately for every Workspace alias and secondary-domain From identity.
Guide
Google Workspace groups and forwarding: test the actual message path
Trace Google Workspace group and forwarding paths without assuming that the original authentication result survives.
Guide
Google Workspace SMTP relay: verify application-specific authentication
Separate permission to use Google SMTP relay from the authentication that recipients observe for application mail.
Guide
Interpret LaPoste.net sender requirements carefully
Evaluate LaPoste.net sender guidance with dated stream evidence, explicit DKIM wording differences and SMTP diagnostics, without inventing thresholds or delivery results.
Guide
Mailman lists and DMARC: review rewriting and indirect-mail behaviour
Choose a Mailman mitigation by testing author identity, list delivery and reply behaviour together.
Guide
Map Microsoft 365 outbound limits to application routes
Map mailbox, relay and tenant limits to real application routes. Review current Microsoft scope and conflicting trial figures without inventing tenant capacity.
Guide
Microsoft 365 application mail: distinguish submission, relay and Direct Send
Choose a supported application route from its sender, recipient and authentication needs before editing Microsoft 365 DNS.
Guide
Microsoft 365 DKIM setup errors: diagnose missing keys and tenant state
Resolve Microsoft 365 DKIM failures by separating missing DNS, tenant configuration and message-path problems.
Guide
Microsoft 365 hybrid mail flow: verify the final outbound signing system
Verify the last outbound signing and modification stages across Microsoft 365 and on-premises Exchange routes.
Guide
Microsoft 365 inbound DMARC handling: inspect policy overrides and receiver decisions
Explain why an inbound message can fail DMARC yet receive a different Microsoft 365 disposition, without weakening sender authentication.
Guide
Microsoft 365 shared and delegated mailboxes: verify the identity that is authenticated
Separate shared-mailbox delegation permissions from the domain identities that external receivers authenticate.
Guide
Salesforce product selection: distinguish CRM, Account Engagement and Marketing Cloud mail
Choose the correct Salesforce product and sending experience before copying authentication records into DNS.
Guide
Transactional email API selection: test identity control and delivery evidence
Select a transactional email API by proving identity control, event meaning and recovery on your own workflows.
Guide
WordPress application mail: identify the actual SMTP or API sending service
Trace a WordPress event to its real mail transport and verify the delivered sender identities before changing DNS.
Related free tools
Enterprise provenance
Why top financial institutions and governments retired their email security dashboards.
Traditional email authentication platforms sell you a dashboard and ask your engineers to do the labour. In high-stakes environments, manual oversight means delayed enforcement, configuration drift and unmonitored shadow domains.
EmailAuth is the agentic email provenance platform. Our agents enforce p=reject, keep third-party senders aligned and move your domains to full RFC 9989 compliance, the new DMARC standard,, with human-in-the-loop auditability.
SaaS · Dedicated tenancy · Air-gapped on-prem · BYOK encryption
[ More in Setup & publishing ]
Sending-service implementation guides
Step-by-step SPF, DKIM and DMARC setup for every email platform, CRM, marketing tool and help desk that sends as your domain.
49 guides
DNS-provider publishing guides
Publish DMARC, SPF and DKIM records at your DNS host, with the exact screens and fields to use.
23 guides
DNS and domain infrastructure
The DNS underneath email authentication: TXT and CNAME records, propagation, subdomains, parked and inactive domains.
4 guides