AArshayinemail-security-blog.hashnode.dev·5d ago · 3 min readYour Emails Are Landing in Spam ?! Fix It in 10 Minutes..If you've ever sent an email from your own domain and had it disappear into a customer's spam folder, this post is for you. Since 2024, Gmail and Yahoo have enforced strict authentication requirements00
RKRavi Kumar Yadavingenerate-absolute-urls-in-oracle-apex.hashnode.dev·6d ago · 5 min readStop Sending Blind Emails: How to Build a User-Editable Template System in Oracle APEXIf you have ever built an enterprise application in Oracle APEX, you know that sending automated emails is a baseline requirement. But what happens when business users want to preview, tweak, and pers10
CPCanny Pigeonsincannypigeons.hashnode.dev·Jul 23 · 5 min readHow to set up DMARC and DKIM for MailchimpMailchimp sends your campaigns from its own servers, so by default the DKIM signature says d=mailchimp.com and the SPF check uses a Return-Path on mailchimp.com. Both checks pass — but for Mailchimp's00
CPCanny Pigeonsincannypigeons.hashnode.dev·Jul 23 · 5 min readDNS drift: why email authentication decaysEmail authentication is configured in DNS, and DNS is a shared surface: your IT team, your web agency, your marketing tools, your registrar — and, if you're unlucky, an attacker — can all change it. T00
CPCanny Pigeonsincannypigeons.hashnode.dev·Jul 23 · 6 min readSource IPs in DMARC reports, explainedEvery row of a DMARC aggregate report starts with an IP address, a message count, and one question: is this server mine? The IP itself carries more evidence than most people expect. Reverse DNS, geolo00
CPCanny Pigeonsincannypigeons.hashnode.dev·Jul 23 · 3 min readWhat is an ESP — and why does it fail DMARC?An ESP (Email Service Provider) is any platform that sends email on your behalf: Mailchimp for newsletters, SendGrid or Mailgun for transactional mail, HubSpot or Klaviyo for marketing, Zendesk for su00
CPCanny Pigeonsincannypigeons.hashnode.dev·Jul 23 · 3 min readWhat is ARC?Forwarding is authentication's blind spot: a forwarded message arrives from an IP that fails SPF, and mailing lists that tag subjects or add footers break DKIM too. ARC — Authenticated Received Chain 00
CPCanny Pigeonsincannypigeons.hashnode.dev·Jul 22 · 4 min readWhat is DMARC? Email authentication explainedDMARC lets you tell every mailbox provider on the planet what to do with email that claims to come from your domain but can't prove it — and it makes them send you reports about everyone using your na00
CPCanny Pigeonsincannypigeons.hashnode.dev·Jul 22 · 3 min readDMARC reports explained: how to read RUA aggregate reportsPublish a DMARC record with a rua address and something remarkable happens: Google, Microsoft, Yahoo and hundreds of other mail operators start emailing you daily summaries of every message that claim00
CPCanny Pigeonsincannypigeons.hashnode.dev·Jul 22 · 4 min readDMARC policies explained: none, quarantine, rejectThe p= tag in your DMARC record is the instruction every mailbox provider follows when a message claiming your domain fails authentication. Getting from monitoring to enforcement is the entire point o00
