How SPF and DKIM Work | Ep1 | Email Security Basics
Learn the foundational protocols of email authentication that every IT professional and MSP should master — SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail).
In this webinar, Mark Glowacz, VP of Partner Success at Mailprotector (and former MSP owner), breaks down the origins of email vulnerabilities, why SPF and DKIM matter, and how to correctly implement them to protect domains from phishing, spoofing, and business email compromise (BEC) attacks.
If you’re responsible for email deliverability, domain management, or cybersecurity, this training will help you better understand how these protocols work, how they fail, and how to troubleshoot them effectively.
What You’ll Learn:
• Why email authentication became necessary
• How SPF and DKIM work to verify senders
• Common DNS mistakes that break authentication
• Real-world examples of misconfigurations
• Tools and processes for validation
• How Mailprotector’s Radar and Bracket encryption tools enhance email security
• What’s next: How these protocols connect to DMARC
Topics Covered:
• SMTP & The History of Email
• SPF (Sender Policy Framework) Deep Dive
• DKIM (DomainKeys Identified Mail) Explained
• Common SPF/DKIM Errors
• SPF Flattening, Includes, and DNS Limits
• Forwarding & Relay Issues
• Tools for DNS Validation (MX Toolbox, EasyDMARC, PowerDMARC)
• Zero Trust Email Security & Mailprotector’s Approach
Chapters:
00:00 – Introduction: Why Email Security Still Matters
02:10 – The History: SMTP & the Birth of Spam
05:40 – What SPF Does & How It Works
09:35 – SPF Advantages & Limitations
13:20 – Understanding DKIM & Message Integrity
17:00 – How DKIM Uses Cryptography to Prevent Tampering
20:50 – SPF vs DKIM: The Snail Mail Analogy
24:00 – How to Implement SPF (with Examples)
30:10 – Common SPF Mistakes to Avoid
35:45 – SPF Record Maintenance & Flattening Explained
41:20 – DKIM Configuration & Key Management
45:50 – Best Practices for DKIM Setup
49:10 – Common DKIM Pitfalls
52:00 – Forwarding, Hybrid Exchange, and Signature Conflicts
55:30 – Tools for Validating SPF & DKIM
58:15 – Troubleshooting Email Deliverability
1:03:40 – How ARC, Bracket, and Radar Fit In
1:07:50 – Real-World Q&A: Common Admin Challenges
1:15:00 – What’s Next: DMARC & Advanced Authentication
Key Takeaways:
• SPF validates the sending server; DKIM validates the message integrity.
• Proper DNS management is critical for maintaining deliverability.
• Never “set and forget” authentication records — they require ongoing maintenance.
• Use SPF flattening when your record exceeds 10 lookups.
• DKIM depends on private/public key pairs stored in DNS — consistency and accuracy are essential.
• Combine SPF, DKIM, and DMARC for complete protection.
Recommended Tools:
• MX Toolbox SuperTool
• EasyDMARC
• PowerDMARC
• Mailprotector Radar – Free Email Security Scan: https://email.security
Learn more: https://mailprotector.com