The four email brand-impersonation attacks - display-name, trusted-brand lures, DKIM replay and exact-domain spoofing - shown with real headers and the defense that stops each.
Public TLS certificate lifetimes are dropping from 398 to 47 days by 2029 - the 200-day cap is already in force. What it means for MX, MTA-STS, TLS-RPT and BIMI, and the 5-step plan to get ahead of it.
Security scanners and privacy proxies inflate your open and click rates. How to tell real from bot opens and clicks, and measure genuine human engagement.
A DKIM replay attack re-sends one validly signed message to millions and it still passes. How replay works, a safe lab to see it, and how DKIM2 fixes it.
A provider dropped an unreadable XML file in your inbox? Here is what a DMARC aggregate report is and how to read one, field by field, with a worked example.
Anyone can fake a sender name - the email headers are the receipts. Learn to read Authentication-Results and the Received chain to catch a spoof in seconds.
TLS-RPT tells you when senders cannot reach your mail server securely. Learn how it works, what the reports mean, and the safe order to set up MTA-STS without breaking your email.
Office 365 Message Encryption (OME): If you use emails to exchange sensitive information and think that the sensitive information may leak into the...
Do you know you can send confidential emails in gmail? If not read this article. The article has details of different modes to secure email.