Practical email security guidance for South African businesses — from DMARC fundamentals to POPIA compliance and deliverability. New guides land regularly; the list below is newest first.
Enterprise-wide DMARC deployment checklist: inventory every brand domain, publish monitoring you will actually read, fix alignment, then raise policy without breaking mail — for security and IT teams.
What Authenticated Received Chain (ARC) is, why ARC fail appears after forwarding, and how intermediaries break SPF/DKIM while ARC helps receivers evaluate the original authentication story.
Business Email Compromise (BEC) response playbook: what South African finance and IT teams should do in the first 30 minutes after email impersonation or invoice fraud.
SPF pass and DKIM pass are not the same as DMARC pass. How SPF and DKIM alignment work, relaxed vs strict modes, and how to fix the “auth looks fine” report rows that still fail policy.
How to read a DMARC aggregate report: source, volume, SPF/DKIM, alignment, and disposition — inventory senders and move toward enforcement without drowning in XML.
How to stop lookalike domain attacks and lookalike domain names: monitoring, process controls, defensive registration, and what DMARC does not cover versus exact-domain spoofing.
What MTA-STS is, how the MTA-STS DNS record and policy file work, and how TLS-RPT reports failed secure delivery — plain-language transport security for operators.
SaaS email sender onboarding checklist: agree SPF, DKIM, ownership, and monitoring before a new platform sends as your domain — so launches stay boring and deliverable.
When BIMI makes sense for South African brands: logo in supported inboxes only after SPF, DKIM, and DMARC enforcement — when it is worth doing and when to wait.
Parked, legacy, and campaign domains are easy to forget — and easy to impersonate. How South African teams should inventory domains, set DMARC on non-sending names, and reduce brand risk.
Generative AI makes phishing copy fluent and personal. It does not invent legitimate SPF, DKIM, and DMARC for your brand — here is what still stops exact-domain spoofing, and what does not.
How to enable DMARC, what p=none means, and a practical operations path through quarantine to p=reject — without breaking the mail your business depends on.
What SPF permerror and temperror mean, why “too many DNS lookups” breaks SPF, and how to fix your SPF record without removing legitimate senders.
Gmail and Yahoo DMARC requirements for bulk senders — what marketing and IT should align on before campaigns slip into spam.
A published DMARC record at p=none only monitors. Here is what that policy really does, why so many domains stay stuck, and how to turn monitoring into real spoofing defence.
Microsoft now enforces SPF, DKIM, and DMARC for high-volume senders to Outlook.com, Hotmail, and Live. What marketing and IT need to fix before campaigns hit spam or rejection.
A practical, plain-English guide to DMARC, SPF, and DKIM for South African businesses — covering POPIA compliance, step-by-step setup, common mistakes, and how to reach p=reject safely.
See SPF, DKIM, and DMARC status in seconds. Self-serve plans add email summaries and alerts. Multi-domain programmes start with a conversation.