Skip to content
GitLab
Closed
Issue created by anarcat@anarcatOwner5 of 5 checklist items completed5/5 checklist items

Deploy SPF, DKIM, and DMARC records for all of torproject.org

Once the SPF and DKIM records are in use everywhere, deploy SPF records for all of torproject.org pointing to known mail hosts. Also enforce a domain-wide DMARC policy, at least to get reporting when we have failures.

next steps:

  1. SPF soft policy everywhere
  2. DKIM records everywhere (#40989 (closed))
  3. DMARC soft record (is it like SPF that we need a record per mx? no, DMARC is inherited)
  4. SPF hard policy everywhere, after some grace period?
  5. DMARC hard policy?
Edited by anarcat