[ Sending-service guides ]

Authenticate email sent through Kreativmedia: configuration and verification

Enable KreativMedia signing in Plesk, use the SPF mechanism for the correct hosting product and verify the authoritative records and authenticated sending route.

By the EmailAuth research team · 5 min read

[ Key points ]

  • Select the SPF authorization for the actual hosting product.
  • Enable Plesk DKIM and verify external authoritative DNS when applicable.
  • Test authenticated submission separately from website scripts.
On this page
  1. Key points
  2. Takeaway
  3. By role
  4. Frequently asked questions
  5. Sources
  6. Glossary
  7. Related guides

[ Takeaway ]

Test authenticated submission separately from website scripts.

[ By role ]

What this means for you

Choose your role for practical next steps.

IT / Mail Admin

Verify the authoritative zone

A key generated in Plesk is useful only when the receiver can find the correct published record.

Next steps

  1. Check active DNS hosting.
  2. Use the product-specific SPF mechanism.
  3. Test authenticated mailbox and website routes separately.

CISO / SecOps

Limit sending permissions

SPF and DKIM changes authorize infrastructure under the organization’s domain.

Next steps

  1. Review a and mx mechanisms before retaining them.
  2. Track public-key ownership and retirement.
  3. Approve DMARC enforcement after all senders are assessed.

Founder / Non-technical

Protect website and mail continuity

Changing nameservers to solve a mail problem can affect more than email.

Next steps

  1. Confirm the hosting product.
  2. Keep DNS migration outside this change unless approved.
  3. Ask for evidence from business-critical application mail.

[ FAQs ]

Frequently asked questions

Which SPF mechanism applies to KreativMedia Webhosting?

The first-party guide names include:_spf.kreativmedia.ch; reconcile it with the existing policy rather than replacing that policy blindly.

Was ist DKIM / DMARC und wie kann ich es verwenden? Was ist ein SPF-Eintrag und wie erstelle ich diesen? RFC 7208 SPF RFC 6376 DKIM RFC 9989 DMARC

Does Reseller Hosting use the same mechanism?

No. The guide names include:_spf.ch-dns.net for Reseller Hosting. Verify the product before publishing.

Was ist DKIM / DMARC und wie kann ich es verwenden? Was ist ein SPF-Eintrag und wie erstelle ich diesen? RFC 7208 SPF RFC 6376 DKIM RFC 9989 DMARC

Where is DKIM enabled?

In Plesk under the selected domain’s mail settings, using the DKIM spam-protection option and confirming with OK.

Was ist DKIM / DMARC und wie kann ich es verwenden? Was ist ein SPF-Eintrag und wie erstelle ich diesen? RFC 7208 SPF RFC 6376 DKIM RFC 9989 DMARC

What if DNS is hosted elsewhere?

The documented automatic Plesk procedure assumes the active zone is on the hosting service. Obtain a supported external-DNS method and verify its authoritative answer before approval.

Was ist DKIM / DMARC und wie kann ich es verwenden? Was ist ein SPF-Eintrag und wie erstelle ich diesen? RFC 7208 SPF RFC 6376 DKIM RFC 9989 DMARC

Will every website form be signed after I enable DKIM?

The source describes authenticated sending. Test how each application submits mail rather than assuming a website follows the mailbox route.

Was ist DKIM / DMARC und wie kann ich es verwenden? Was ist ein SPF-Eintrag und wie erstelle ich diesen? RFC 7208 SPF RFC 6376 DKIM RFC 9989 DMARC

Does p=none switch DMARC off?

No. Receivers can still evaluate DMARC. The policy requests no enforcement based on that result.

Was ist DKIM / DMARC und wie kann ich es verwenden? Was ist ein SPF-Eintrag und wie erstelle ich diesen? RFC 7208 SPF RFC 6376 DKIM RFC 9989 DMARC

Must both SPF and DKIM pass for DMARC?

No. At least one passing path must also align with the From domain under the applicable alignment mode.

Was ist DKIM / DMARC und wie kann ich es verwenden? Was ist ein SPF-Eintrag und wie erstelle ich diesen? RFC 7208 SPF RFC 6376 DKIM RFC 9989 DMARC

What remains unverified?

The live hosting product, generated selector, authoritative records and original received-message identity table remain untested, with human review pending.

Was ist DKIM / DMARC und wie kann ich es verwenden? Was ist ein SPF-Eintrag und wie erstelle ich diesen? RFC 7208 SPF RFC 6376 DKIM RFC 9989 DMARC

[ Sources ]

Sources

  1. Was ist DKIM / DMARC und wie kann ich es verwenden?

    Sections Was ist DKIM / DMARC; DKIM aktivieren; DMARC aktivieren

  2. Was ist ein SPF-Eintrag und wie erstelle ich diesen?

    Sections Was ist ein SPF-Eintrag und wie erstelle ich diesen?; Webhosting:; Reseller Hosting:

  3. RFC 7208 SPF

    Sections §3.2; 3.3; 4.6.4

  4. RFC 6376 DKIM

    Sections §3.5; 3.6.2; 6.1

  5. RFC 9989 DMARC

    Sections §4.4; 4.7; 4.10; 5; Appendix A.6 removal of pct

[ Glossary ]

Glossary

Authoritative DNS zone
The published zone whose nameservers provide the definitive records for the domain.
Authenticated submission
Sending through a mail service using the authorized account’s submission method.
Plesk
The hosting control panel used in KreativMedia’s documented mail and DNS procedure.
SPF include
A mechanism that evaluates another domain’s SPF policy as part of authorization.
Monitoring policy
A p=none DMARC policy that requests no DMARC-based enforcement while evaluation can still occur.

Enterprise provenance

Why top financial institutions and governments retired their email security dashboards.

Traditional email authentication platforms sell you a dashboard and ask your engineers to do the labour. In high-stakes environments, manual oversight means delayed enforcement, configuration drift and unmonitored shadow domains.

EmailAuth is the agentic email provenance platform. Our agents enforce p=reject, keep third-party senders aligned and move your domains to full RFC 9989 compliance, the new DMARC standard,, with human-in-the-loop auditability.

Governments Large enterprises Tier-1 financial institutions

SaaS · Dedicated tenancy · Air-gapped on-prem · BYOK encryption

Knowledge Base