Real-time reporting for websites and email. DMARC, Content Security Policy, Network-Error-Logging, SMTP TLS-RPT, Expect-CT and more.
Joined December 2018
- Tweets418
- Following16
- Followers673
- Likes208
Pinned Tweet
Curious? See how manageable reports can be with URIports.com! We ❤️ reports! #CSP #Deprecation #DMARC #Intervention #ExpectCT #TLSRPT #NEL
The new BIMI lps= tag, also known as the local-part selector, has been added to the BIMI specification. It allows domain owners to define different brand indicators based on the sender address (for example noreply@, support@, marketing@). uriports.com/blog/bimi-lps-t…
NEW BLOG about the security.txt file (RFC9116), highlighting common implementation errors. Only 0.7% of top internet domains use it, and shockingly, a mere 19% of those are RFC compliant! Plus, we've developed a FREE validator for you to test yours. uriports.com/blog/security-t…
For anyone considering implementing @securitytxt, check out securitytxt.org. It's a handy resource for effortlessly creating your own security.txt file. A big shoutout to @EdOverflow and @nightwatchcyber for their contributions!
Microsoft (Outlook.com and Outlook Enterprise) has ceased issuing DMARC reports. We observed an 85% reduction from the 22nd of February and a further 99% decrease from the 23rd. As of yesterday, we haven't processed any reports from them.
The issue is in the SMTP transmission: techcommunity.microsoft.com/…
We've added a 'copy to clipboard' option to learnDMARC.com with data anonymization, enabling easy sharing of results on social platforms for collaborative, privacy-conscious problem-solving.
Many learning about email security often find the concept of alignment in SPF and DKIM challenging to understand. This blog will clarify what alignment means and why it's crucial for passing DMARC. uriports.com/blog/demystifyi…
Calling all email nerds! Let's see your expertise on DMARC! Answer 10 SPF, DKIM, and DMARC questions, share your score, and challenge someone to do the same by tagging them in the comments. If you finish the quiz, you'll get a FREE GIF! learndmarc.com/#quiz
0.3% of the top 1 million domains have implemented MTA-STS. 20.3% of these have issues. 54% enforced. To sum up, just 0.13%, are effectively countering MiTM downgrade attacks through the correct implementation of an enforced MTA-STS policy. uriports.com/blog/mta-sts-su…
URIports has long supported it, but Chrome 120's new permissions policy violation reports let site owners see and monitor disallowed feature requests on their pages. uriports.com/blog/permission…
URIports retweeted
75% of all people who completed the learnDMARC.com quiz scored less than 60%. Furthermore, only 8% of contestants got all questions correct. So, how is your knowledge of #SPF, #DKIM, and #DMARC? Show me your score; you might learn something!
NEW BLOG: Best practices for #SPF, #DKIM, and #DMARC to help reduce email #spoofing and #phishing, build and maintain a solid reputation, and increase email deliverability. #emailsecurity uriports.com/blog/spf-dkim-d…
As of Chrome 105, the Expect-CT header has been deprecated and will be removed in Chrome 107. We encourage users who enabled Expect-CT on their websites to remove the header. uriports.com/blog/the-end-of…
URIports retweeted
A great visualisation learndmarc.com/. Just how much thought and care went into it.
Also a nice tool for troubleshooting email server setup
We've just pushed an update that corrects the unreliable Chrome 103+ deprecation reports. We'll activate the notifications as soon as possible. bugs.chromium.org/p/chromium…
A bug in Chrome 103->105 has crippled the Reporting API deprecation reporting. We have notified the @ChromiumDev team and are currently working on a workaround. We have disabled our deprecation notifications for the time being. bugs.chromium.org/p/chromium…
This month, Sender Policy Framework (SPF / RFC7208) has been around for eight years, and to celebrate, we've taken a look at the SPF implementation amongst the top 600k domains.
uriports.com/blog/sender-pol…
URIports retweeted
We've added the option to #spoof an email to learnDMARC.com so you can check if spam or phishing emails sent on your behalf will get successfully blocked by your #DMARC policy.
URIports retweeted
I have to admit #wordle is a lot of fun, but a perfect score on learnDMARC.com is just as satisfying. How is your email security performing? #spf #dkim #dmarc
