Learn about DMARC, SPF, and DKIM

Welcome to DMARCPal's Learn blog. Check our posts to discover and learn more about DMARC, SPF, DKIM, and how to get the most value of your DMARCPal subscription.

DANE can make inbound SMTP resistant to certificate substitution and STARTTLS downgrade attacks. It can also turn a small DNS or certificate mistake into a growing queue of delayed mail.

That is not a reason to avoid DANE. It is a reason to deploy it as a mail-routing change, not as a single TLS c...