
DNS TTL strategy for email authentication changes
Lower TTLs before you change SPF, DKIM or MX, and know which caches ignore you. A practical timeline for authentication changes without surprises.
5 min read

Lower TTLs before you change SPF, DKIM or MX, and know which caches ignore you. A practical timeline for authentication changes without surprises.
5 min read

Receivers expect a sending IP to have a PTR record that resolves back to the same IP and a sane HELO name. Configure all three and verify them.
4 min read

The dig queries that answer most email questions: SPF, DKIM selectors, DMARC, MX, PTR, MTA-STS and BIMI, plus how to bypass caches when testing.
5 min read

DMARC moved to the standards track as RFCs 9989, 9990 and 9991. Here is what changed: pct is gone, np and psd arrive, and a DNS tree walk replaces the PSL.
4 min read

Stale CNAMEs and forgotten includes can let someone else send or host content on your domain. How takeovers happen and how to audit DNS for them.
5 min read

Most email migrations go fine, but the bad ones go badly fast. A rollback plan: triggers, the DNS values to save, and how to reconcile mail after reverting.
5 min read

The email bundled with your web hosting was fine to start with. Why it causes trouble as you grow, and how to move mail off cPanel without breaking your site.
5 min read

How to move a domain's mail off Zoho Mail without losing messages: export options, recreating aliases and groups, DNS changes, and checking every integration.
5 min read

A step-by-step plan for moving a domain's email off Microsoft 365: inventory, exporting mailboxes, DNS records to change, coexistence, and what to check after.
5 min read

Attackers love subdomains you never configured. How sp= and the new np= tag cover them, how policy discovery works, and when to publish per-subdomain records.
4 min read

A practical system for agencies that touch email on dozens of client domains: who owns DNS, how to get access, what to record, and how to offboard cleanly.
5 min read