Email antispoofing

Machine-translated page

This English version was produced by automatic AI translation. Only the French version is reviewed by the author, so it remains the authoritative reference. Spotted a mistake or an awkward turn of phrase? Please report it by opening a pull request — contributions are welcome.

This series of articles is aimed at domain administrators who need to configure email mailboxes in a way that prevents identity spoofing (SPF, DKIM, DMARC, BIMI…):

Architecture and concepts - 1/9
Standard email addresses - 2/9
FCrDNS and cross-validation - 3/9
SPF (Sender Policy Framework) - 4/9
DKIM (DomainKeys Identified Mail) - 5/9
DMARC (Domain-based Message Authentication) - 6/9
BIMI and an analysis of its limits - 7/9
Parked Domain Locking - 8/9
Summary and conclusion - 9/9

Suggest an edit

By Yanal-Yves FARGIALLA • Updated on July 4, 2026 (AI-assisted writing, final review by the author)
Unless otherwise noted, this content is licensed under CC BY-SA 4.0.