Email Security
Score
85/100
SPF
Valid
DKIM
Key present
DMARC
NONE
Findings
7
Email Health
SPF
Valid
DKIM
Key present
DMARC
NONE
BIMI
Not configured
MTA-STS
Missing
STARTTLS
Not tested
TLS-RPT
Missing
Findings
7
Security Findings
SPF 1
SPF TXT record exceeds recommended DNS length
operational_recommendation / warning / RFC 7208 3.4
DKIM 0
No DKIM issues detected
DMARC 3
Historic DMARC pct tag detected (RFC 7489; ignored by RFC 9989)
informational / info / RFC 9989 4
Historic DMARC ri tag detected (RFC 7489; ignored by RFC 9989)
informational / info / RFC 9989 4
External DMARC failure reporting to fr.eu.dmarcian.com is not authorized
operational_recommendation / warning / RFC 9989 7
MTA-STS 0
No MTA-STS policy issues detected
TLS-RPT 0
No TLS-RPT policy issues detected
STARTTLS 3
SMTP STARTTLS requires a live SMTP session against each MX host and is not tested in this DNS-only lookup.
unsupported_test / info / RFC 3207 4
MTA-STS is not configured; STARTTLS remains opportunistic unless enforced by another mechanism such as DANE.
operational_recommendation / info / RFC 3207 6
TLS-RPT is not configured, so delivery TLS failures may not be reported back to the domain owner.
operational_recommendation / info / RFC 8460 1
BIMI 0
BIMI is not configured (optional)
Improvement Opportunities
+15 points
Enable DMARC enforcement (p=reject)
Score Calculation
| Component | Score | Reason |
|---|---|---|
| SPF Record | 10 / 10 | SPF record detected |
| SPF Enforcement | 20 / 20 | Hard fail policy (-all) |
| SPF Lookup Health | 10 / 10 | 6 DNS lookups |
| SPF PTR Usage | 5 / 5 | No PTR mechanism detected |
| SPF Include Validation | 5 / 5 | All SPF includes resolved |
| DKIM | 25 / 25 | 1 valid selector(s) |
| DMARC Record | 10 / 10 | DMARC record detected |
| DMARC Enforcement | 5 / 20 | Policy set to none |
| Total | 85 / 100 |