Email Security for mozilla.org
SPF configured · DMARC p=reject · MX 4 records.
++
~/email-security · mozilla.orgstrong
$ dig +short TXT mozilla.org
[resolve] ok
[audit] posture: strong · MX records: 4
mx
1aspmx.l.google.com5alt2.aspmx.l.google.com5alt1.aspmx.l.google.com10aspmx3.googlemail.com
warn
SPFfound
Authorizes senders that may use this domain in MAIL FROM.
lookups4 / 10
all~all
- · Uses '~all' (softfail) — consider '-all' for stronger enforcement.
ok
DMARCfound
Tells receivers what to do when SPF or DKIM fail.
policyreject
pct100%
ruamailto:dmarc_agg@vali.email, mailto:dmarc@mozilla.com
n/a
DKIMnot configured
Public key at default._domainkey — only the 'default' selector was checked.
- · No DKIM record at 'default._domainkey' — actual selector may differ (e.g., 'google._domainkey').
n/a
MTA-STSnot configured
Announces SMTP TLS enforcement policy.
- · No MTA-STS announce TXT — modern TLS enforcement not advertised.
n/a
TLS-RPTnot configured
Telemetry destination for SMTP TLS failures.
- · No TLS-RPT record — no telemetry on SMTP TLS failures.
ok
BIMIfound
Logo announcement at default._bimi — only the 'default' selector was checked.
Related