Is there any part of this DMARC setup tutorial that is confusing? Leave a comment below and I'll do my best to answer. And if you're looking for a good managed solution, the one I'm using and recommend is EasyDMARC: www.easydmarc.com
You said you have to have both SPF and DKIM setup to do DMARC, which isn't true. DMARC policy verification is a logical OR, and only one of SPF or DKIM check need to pass per email. So still value doing it if you haven't gotten around to one or the other (DKIM PKI generation and setup, especially when self hosted can be hairy compared to just publishing a list of IPs that send email via SPF)
For those watching and what spf, dkim and dmarc are, here's quick overview Spf: list of domains and ips that are allowed to send mail Dkim: your digital signature; with this you authenticate your domain to your email server Dmarc: the lock that rejects or quarentines messages from senders that are trying to spoof your email domain
Really admire your videos, Mr. Josh. It's amazing how you are completely honest about privacy & security and don't spread misinformation regarding it. Hats off to you!
@3:05 you said you put the private key in the DNS txt dkim record, but that looks more like the public key. the private key would be hidden with google and used to sign the messages being sent from your domain on googles servers. a private key is not stored in DNS otherwise other mail services would be able to also sign your mail
Thank you for this video! What if we're using outlook for our official emails and mailgun for bulk outreach campaigns. Do we set-up one DMARC for this?
Can you have multiple SPF records on a single domain? The answer is no: a domain MUST NOT have multiple SPF records, otherwise SPF fails with PermError. You need to have 1 SPF record and add all your domains and IP's in the 1 SPF record
Hi there josh in your video how to prevent identity theft for free video I froze all three credit bureaus but can I open a debit card from a bank or a checking or savings account with a freeze still or do I need to thaw it all bureaus?
Yes, you should be able to open a debit card, particularly if it's a bank where you've had a history of banking. If not, remember that it's not too hard to thaw a freeze by logging into your online accounts with the three credit bureaus.
@@AllThingsSecured thank you josh im getting my BofA debit first so sooner I can get the credit card later on but obviously unfreeze all bureaus before even applying for debit thank you and keep doing what you’re doing :)
Hello, nice to see u, there are plenty vpn in the market and I don't know which one works best. People say express vpn is good but I want to ask if the download and apload speed of the express vpn is 20 is it good. Because I am confused, I dont know the best vpn out there. PLEASE HELP ME TO KNOW THE GOOD ONE.
Great channel Josh. Please do a video on CA CERTIFICATES in Android settings. They are permissions for countries to spy on your phone. I closed the china CA.C & phone works fine. I close one at a time then check phone functions.
It would have been nice if, near the beginning of the video or other logical starting place you had told viewers that if they didn't know what SPF or DKIM files or specs were, they would probably not get a lot of value from this video. Your references and discussion of SPF and DKIM left me 'twisting in the wind,' and I wasted viewing the entire video hoping to get some clue(s) about these terms.
Hey josh. I've been searching for apps that are based out of 14 eyes countries. E-mail services, search engines and ... I couldn't find any secure messaging app that is out of 14 eyes countries with good overal quality yet. My best shots was Skred (so many bugs) and tox project (couldn't find if it's trustworthy yet) so far. I came to the idea if its a good topic to make a video about it. P.s. I couldn't test Threema as it's not free app.
Is there any part of this DMARC setup tutorial that is confusing? Leave a comment below and I'll do my best to answer. And if you're looking for a good managed solution, the one I'm using and recommend is EasyDMARC: www.easydmarc.com
All of it.
You said you have to have both SPF and DKIM setup to do DMARC, which isn't true. DMARC policy verification is a logical OR, and only one of SPF or DKIM check need to pass per email.
So still value doing it if you haven't gotten around to one or the other (DKIM PKI generation and setup, especially when self hosted can be hairy compared to just publishing a list of IPs that send email via SPF)
For those watching and what spf, dkim and dmarc are, here's quick overview
Spf: list of domains and ips that are allowed to send mail
Dkim: your digital signature; with this you authenticate your domain to your email server
Dmarc: the lock that rejects or quarentines messages from senders that are trying to spoof your email domain
Really admire your videos, Mr. Josh. It's amazing how you are completely honest about privacy & security and don't spread misinformation regarding it. Hats off to you!
Thanks so much, Haris!
Very professional presentation today all round including the wardrobe. I thought i was watching paid content. Well done. 10/10. Thank you.
Thanks, Simon. Not sure I've ever been complimented on my wardrobe before.
@3:05 you said you put the private key in the DNS txt dkim record, but that looks more like the public key. the private key would be hidden with google and used to sign the messages being sent from your domain on googles servers. a private key is not stored in DNS otherwise other mail services would be able to also sign your mail
Thank you for this video! What if we're using outlook for our official emails and mailgun for bulk outreach campaigns. Do we set-up one DMARC for this?
Thank you! this is the most comprehensive video! I fixed my emails errors after I watched this video.
This was really informative, definitely opened my eyes. Helped me out, big time! Thank you
Glad it was helpful!
there should only be 1 SPF record not multiple. You can add multiple IP addresses/hostnames into the single SPF.
if i go to to the tab authenticate email it is not showing the TXT and Value? what do i have to do
Can you have multiple SPF records on a single domain? The answer is no: a domain MUST NOT have multiple SPF records, otherwise SPF fails with PermError. You need to have 1 SPF record and add all your domains and IP's in the 1 SPF record
Very helpful video, thanks so much Josh for sharing!
I think you need to add mailto: before all email addresses you report to.
Can I set up SPF and DKIM for both Protonmail and SimpleLogin?
For Pronmail, yes. For SimpleLogin? I don’t believe so (nor is it really necessary IMO).
Hi there josh in your video how to prevent identity theft for free video I froze all three credit bureaus but can I open a debit card from a bank or a checking or savings account with a freeze still or do I need to thaw it all bureaus?
Yes, you should be able to open a debit card, particularly if it's a bank where you've had a history of banking. If not, remember that it's not too hard to thaw a freeze by logging into your online accounts with the three credit bureaus.
@@AllThingsSecured thank you josh im getting my BofA debit first so sooner I can get the credit card later on but obviously unfreeze all bureaus before even applying for debit thank you and keep doing what you’re doing :)
Hi I think my email has been spoofed as I keep receiving chain mail emails from a group called scammer is there anyway to stop this for good?
Hello, nice to see u, there are plenty vpn in the market and I don't know which one works best. People say express vpn is good but I want to ask if the download and apload speed of the express vpn is 20 is it good. Because I am confused, I dont know the best vpn out there. PLEASE HELP ME TO KNOW THE GOOD ONE.
This isn't a video about VPNs.
Thank you
My pleasure.
Great channel Josh. Please do a video on CA CERTIFICATES in Android settings. They are permissions for countries to spy on your phone. I closed the china CA.C & phone works fine. I close one at a time then check phone functions.
It would have been nice if, near the beginning of the video or other logical starting place you had told viewers that if they didn't know what SPF or DKIM files or specs were, they would probably not get a lot of value from this video. Your references and discussion of SPF and DKIM left me 'twisting in the wind,' and I wasted viewing the entire video hoping to get some clue(s) about these terms.
👍🏻
🙏
bro i am so confused pelase someone help me any whose reading this can help me please
Not helpful.
Ok, and what would have made it helpful?
Hey josh. I've been searching for apps that are based out of 14 eyes countries. E-mail services, search engines and ...
I couldn't find any secure messaging app that is out of 14 eyes countries with good overal quality yet. My best shots was Skred (so many bugs) and tox project (couldn't find if it's trustworthy yet) so far.
I came to the idea if its a good topic to make a video about it.
P.s. I couldn't test Threema as it's not free app.
Searched more actually and Seems like I was wrong about Skred's origins. As it's French based
Very professional presentation today all round including the wardrobe. I thought i was watching paid content. Well done. 10/10. Thank you.