marseille.fr

Delegation · The nameservers at the parent and in the zone should be the same. Only in the zone: ns1.mairie-marseille.fr, ns2.mairie-marseille.fr. ns1.mairie-marseille.fr, ns1.marseille.fr, ns2.mairie-marseille.fr, ns2.marseille.fr, ns3.marseille.fr, nsa.perf1.fr, nsb.perf1.com, nsc.perf1.com report NS ns1.mairie-marseille.fr ns1.marseille.fr ns2.mairie-marseille.fr ns2.marseille.fr ns3.marseille.fr nsa.perf1.fr nsb.perf1.com nsc.perf1.com.

DNSSEC · NSEC3 uses 10 iterations and a 16-byte salt. RFC 9276 recommends 0 iterations and no salt: extra iterations cost resolvers CPU and add no real protection, and some validators treat high counts as insecure.

DMARC · DMARC policy is set to 'quarantine'. Consider upgrading to 'reject' for stronger protection once you've verified legitimate emails are passing authentication.

DKIM · The _domainkey name exists but no DKIM key was found under the common selectors. Selectors are provider-specific; check yours with -selector.

MX · The following MX hosts could not be resolved to IPv6 addresses: de-smtp-inbound-1.mimecast.com, de-smtp-inbound-2.mimecast.com

TLS · With mode: testing, senders only report TLS problems (via TLS-RPT) and still deliver without TLS. Switch to mode: enforce once reports are clean.

BIMI · The logo is published without a Verified Mark Certificate. Gmail and Apple Mail only show BIMI logos with a VMC or CMC; Yahoo shows it without one.