Authentication and encryption
Email authentication allows the server that receives the email to verify that the
sender of an email is who they say they are. Because of the nature of the underlying protocols,
everything in an email can be forged except for the IP address that connects to the recipient's
server.
Sender Policy Framework (SPF) and Domain Keys Identified Mail (DKIM)
SPF and DKIM are authentication protocols that are a requirement in any modern email marketing effort. Without SPF and DKIM authentication, your emails might be rejected because of the lack one or both authentication protocols.
Adding a DKIM record
A zone file has many DNS records, and this task shows how to add a single text record.
Domain-based Message Authentication, Reporting, and Conformance (DMARC)
Domain-based Message Authentication, Reporting, and Conformance (DMARC) is an authentication policy that is published in the DNS and tells receivers what to do with unauthenticated email. DMARC uses a short entry in a domain's DNS zone file. Because DMARC-style alignment is widely used as a spam-filtering metric, publishing a basic DMARC policy should be a top priority.
Transport Layer Security (TLS)
Transport Layer Security (TLS) is an encryption method that is used to encrypt a communication channel between two computers. It is the successor to Secure Socket Layer (SSL), and the two terms are often used interchangeably.