Webcuris

Field notes

What we find, and what it means

Notes from the work: findings we keep seeing, fixes that hold up, and the reasoning behind how this product decides what counts as a risk.

1 article matching

Tagged dkim · clear

A DMARC TXT record beside the policy ladder: p=none monitor only, p=quarantine spam folder, p=reject refused

Missing DMARC: What Actually Happens to Your Email

Without DMARC, anyone can send mail that says it is from your domain and no receiving server has instructions to stop them. The three records, the rollout that does not break your own mail, and the duplicate-record trap that silently disables the whole thing — which we walked into ourselves.

2 min read
Email & DNS

Get the next one

One email when a new article goes out. No newsletter, no drip sequence, no sales follow-up.

Unsubscribe in one click. We never sell or share the address.

Contact

Talk to us.

Questions about what the engine checks, whether it fits your estate, or what it deliberately refuses to do. A person reads every message.

  1. 01You writePlain form, no qualifying call, no obligation. The marketing checkbox is optional and unticked.
  2. 02A person reads itMessages land with the team, not a queue-bot. Nothing is auto-replied.
  3. 03You get an answerTo the address you gave — including “this product is not the right fit”, when that is the honest answer.
Reporting a vulnerability?
Read the disclosure policy first — it tells you what is in scope and what to expect.
New messagereplies go to your email

We reply to this address, so a disposable one will not reach you.

+91

0 / 4000