Concept
An email authentication standard published in DNS that checks whether SPF or DKIM results align with the visible From domain and tells receivers to do nothing, quarantine or reject failing mail.
| Type | Concept |
|---|
2026-10-29 · Video on YouTube
Most tenants run Microsoft Defender for Office 365 on defaults and assume they are protected while attackers test their filters every day. This episode is for email security admins, security engineers and SOC teams who want to tune anti-phishing, Safe Links…
2026-07-22 · Video on YouTube
Modern phishing emails copy real branding and writing styles, so a basic spam filter no longer keeps a business safe. This episode is for Microsoft 365 admins, security teams and business owners. You learn how the five protection layers of Microsoft Defender…
2026-10-21
Learn how SPF, DKIM and DMARC work together in Microsoft 365 to stop email spoofing, prevent Business Email Compromise, and secure your domain. Anyone with a laptop can send email that pretends to be your company. The email system we all rely on was built to…
2026-05-05 · Video on YouTube
This episode explores how deepfake-enabled Business Email Compromise (BEC) attacks are becoming more convincing and dangerous for organizations. Traditional trust signals like email addresses, writing style, or even voice messages are no longer reliable…
2026-10-29 · Video on YouTube
Exchange Online is the email engine inside Microsoft 365, wrapped in words nobody explains. It's the service that holds your mailbox, your calendar, and your contacts, and it runs on Microsoft's servers instead of a machine in your office. In this episode of…
2026-09-24 · Video on YouTube
Many Microsoft messaging environments look secure on the surface but still run on defaults, weak identities and misunderstood mail flow. This conversation with Exchange MVP Thomas Stensitzki is for Exchange and Microsoft 365 administrators running…
2025-08-05 · Video on YouTube
Hybrid Exchange Isn’t a Wizard—It’s a Web of Dependencies Running the Hybrid Configuration Wizard is the easy part. Keeping hybrid coexistence healthy requires aligning directory attributes, OAuth/federation trust, DNS (Autodiscover/MX/SPF/DKIM), EOP…
Three records in your DNS that together close the gap that lets a stranger wear your company's name. · From the episode: SPF, DKIM and DMARC - Simply Explained
No. A surprising number of organizations only set up one of the three records, but SPF, DKIM and DMARC work together. Three records in your DNS can quietly close the gap that lets others send email in your company's name. · From the episode: SPF, DKIM and DMARC - Simply Explained
DMARC ties the checks to the name people actually see in their inbox, so a fake sender cannot simply wear your company's name. · From the episode: SPF, DKIM and DMARC - Simply Explained
No. SPF, DKIM and DMARC only check whether the sender is authentic and do not examine content or intent. A deepfake message can still come from a legitimate or compromised account. · From the episode: Stop Deepfake Business Email Compromise with…
Autodiscover, MX, SPF, DKIM, and if used SRV or CNAME, correct both internally and externally. Connectors, TLS and SPF/DKIM/DMARC alignment also govern delivery and reputation. · From the episode: Maintain Hybrid Exchange Beyond the…
Short info above, community knowledge below: add practical tips, examples or corrections. New contributions are reviewed first; trusted members publish directly.
Nobody has listed this topic yet. Add it to your profile.
Maintained by Mirko Peters (Microsoft MVP) · Last updated:
EN
Deutsch
Español
Français
Italiano
Português
Nederlands
Polski
Bahasa Indonesia
Русский
Українська
العربية
עברית
日本語
한국어