lecourrierduparlement.fr

21 passed 6 warn 1 failed

Areas

Problems

• ✗

  Policy: none (monitoring only)

  DMARC · DMARC policy is set to 'none', which only monitors but doesn't protect against spoofing. Consider upgrading to 'quarantine' or ideally 'reject'.

  #4
• !

  Signed, but no DS at parent

  DNSSEC · The zone is signed (DNSKEY present) but the parent has no DS record, so the chain of trust is incomplete. Publish the DS record at your registrar.

  #8
• !

  Hosts without IPv6

  MX · The following MX hosts could not be resolved to IPv6 addresses: vm13-12.hosteur.net

  #11
• !

  Single MX host, no backup

  MX · Only one MX record found. For better email reliability, consider adding at least one backup MX server.

  #12
• !

  1024-bit DKIM key

  DKIM · 1024-bit RSA keys are the minimum and are considered weak today: mail (1024 bits). Rotate to a 2048-bit key.

  #23
• !

  Report address not authorized

  DMARC · These report addresses are in another domain that has not agreed to receive your reports, so receivers will not send them: mailto:dmarc@smtp.mailtrap.live (needs lecourrierduparlement.fr._report._dmarc.smtp.mailtrap.live). Ask the report provider to publish the record, or check the address.

  #29
• !

  Not configured

  TLS · MTA-STS is not configured, so other mail servers fall back to unencrypted delivery when TLS fails or is stripped by an attacker. Publish a _mta-sts TXT record and a policy at https://mta-sts.<domain>/.well-known/mta-sts.txt.

  #32

Recent checks

Full report

Mail report for lecourrierduparlement.fr ›