SPF (Sender Policy Framework) is a type of DNS that identifies the email servers that are permitted to send emails using a particular domain name, in this case, yours. It helps the recipient email server identify emails sent using your domain and separate and prevent those spammers that want to use it on your behalf. It is the first level of defense against spoofing.
DKIM (Domain Key Identified Record) is an authentication method, which uses email encryption with public/ private keys. It validates whether the emails are generated from the authorized servers. It is a further guarantee to a user’s email server that the email is legitimate. Think of DKIM as a hidden «digital signature» on your email.
DMARC (Domain-based Message Authentication, Reporting & Conformance) is an additional security level. It complements the SPF and DKIM, and It also adds a reporting function that allows senders and receivers to improve and monitor the protection of the domain from fraudulent email.
Sometimes spammers imitate the ‘From addresses’ in the emails and appear from the specific domain. To prevent this type of abuse, you can configure the DMARC record. The email services which use the DMARC standards can handle unauthenticated emails. This also helps control ‘Phishing’ activities using your domain and helps protect your domain’s reputation.
We recommend you to create these three kinds of DNS Records in your Domain Administration, at least the SPF Record.
In all three cases, you will have to create a TXT record.
SPF
SPF is the initial record you should begin with
USE
HOST: @
TXT VALUE: v=spf1 a include:_spf.embluemail.com ~all
If you currently have an SPF or uses other services that send emails you only have to add
include:_spf.embluemail.com
DKIM
Sometimes depending on the Domain Company you have to add your own domain, but in go daddy it works without it (only using _domainkey)
2. DKIM Record
HOST: epexo._domainkey
TXT VALUE: v=DKIM1;k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC92DPEfr8M28KVopiGVgDo3uYLBtSgNIsarAUjOTLiW2LGC+k2WrEBTIyk/XM+N6mUZc9mf7hlrw3zG2T975IPKk1eg4XnqDj45xpKplqyvDFgehuARlSzv1dp2NlqayECXihlFwrtzvXXoEv/9QiH3Efaii/GeMsVqYrxBNSHmQIDAQAB
epexo._domainkey | v=DKIM1;k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC92DPEfr8M28KVopiGVgDo3uYLBtSgNIsarAUjOTLiW2LGC+k2WrEBTIyk/XM+N6mUZc9mf7hlrw3zG2T975IPKk1eg4XnqDj45xpKplqyvDFgehuARlSzv1dp2NlqayECXihlFwrtzvXXoEv/9QiH3Efaii/GeMsVqYrxBNSHmQIDAQAB |
It has to have an space between the ; and the P v=DKIM1;k=rsa; p=MIGfM
DMARC
Host: _dmarc
TXT VALUE: v=DMARC1; p=none; rua=mailto:postmaster@thefranchisecreatornetwork.com
_dmarc | v=DMARC1; p=none; rua=mailto:postmaster@thefranchisecreatornetwork.com |