| ✓ | MX | 1 mail server, all resolve |
| ! | SPF | 10 of 10 DNS lookups used: close to the limit |
| ! | DKIM | selector1: 1024-bit RSA key; 2048-bit is recommended |
| ✓ | DMARC | p=quarantine: failing mail goes to spam |
| · | MTA-STS | Not set up (optional) |
| · | TLS-RPT | Not set up (optional) |
| · | BIMI | Not set up (optional) |
| · | DNSSEC | Not signed (optional) |
MX
| 0 | github-com.mail.protection.outlook.com | 52.101.42.14, 52.101.41.54 |
- ✓ 1 mail server, all resolve
SPF
v=spf1 ip4:192.30.252.0/22 include:spf.protection.outlook.com include:_netblocks.google.com include:_netblocks2.google.com include:mail.zendesk.com include:_spf.salesforce.com include:servers.mcsv.net include:mktomail.com include:sendgrid.net ip4:62.253.227.114 ip4:166.78.69.169 ip4:166.78.69.170 ip4:166.78.71.131 ~all
Include tree (10 lookups)
- include:spf.protection.outlook.com
- include:_netblocks.google.com
- include:_netblocks2.google.com
- include:mail.zendesk.com
- include:_spf.salesforce.com
- include:servers.mcsv.net
- include:mktomail.com
- include:sendgrid.net
- ! 10 of 10 DNS lookups used: close to the limit
- ✓ “~all” soft-fails unlisted senders (strict enough with DMARC)
DKIM
| google | RSA 2048-bit |
| selector1 | RSA 1024-bit |
| k1 | RSA 1024-bit |
| s1 | RSA 2048-bit |
| s2 | RSA 2048-bit |
- ✓ google: RSA 2048-bit key
- ! selector1: 1024-bit RSA key; 2048-bit is recommended
- ! k1: 1024-bit RSA key; 2048-bit is recommended
- ✓ s1: RSA 2048-bit key
- ✓ s2: RSA 2048-bit key
Checked common selectors: default, google, selector1, selector2, k1, s1, s2, dkim, mail, resend, fm1, protonmail.
DMARC
v=DMARC1; p=quarantine; sp=reject; pct=100; rua=mailto:dmarc@github.com; ruf=mailto:dmarc@github.com; fo=1
- p
- quarantine
- sp
- reject
- pct
- 100
- rua
- mailto:dmarc@github.com
- ruf
- mailto:dmarc@github.com
- fo
- 1
- ✓ p=quarantine: failing mail goes to spam
- ✓ Aggregate reports go to dmarc@github.com
MTA-STS
- · Not set up (optional; enforces TLS for incoming mail)
TLS-RPT
- · Not set up (optional; reports TLS delivery failures)
BIMI
- · Not set up (optional; shows your logo in supporting inboxes)