DNS Security

Understand DNS records used by web and email security.

DNS is the public address book for a domain. It exposes web, mail and verification records.

A, AAAA, MX, TXT, NS and CAA records all say something about how a domain is operated.

For email identity, SPF and DMARC records are especially important.

Practical checklist

Use reliable NS records

Publish SPF

Publish DMARC

Add CAA

Remove obsolete TXT records