From d3d9a8486c8a836a2ac1a291a94a73351628f1ba Mon Sep 17 00:00:00 2001 From: "prompt.ac/@jeffrey" Date: Mon, 14 Sep 2026 09:35:01 -0400 Subject: [PATCH] lith/DNS.md: the apex now has SPF and DKIM Co-Authored-By: Claude Fable 5.1 --- lith/DNS.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/lith/DNS.md b/lith/DNS.md index df3c85368e..7661ff7809 100644 --- a/lith/DNS.md +++ b/lith/DNS.md @@ -46,3 +46,9 @@ The primary frontend origin is `209.38.133.33`. Caddy serves the same name over HTTPS only to hold its STARTTLS certificate. - The apex MX stays on Google (`aspmx.l.google.com` et al.) — one human mailbox, `mail@aesthetic.computer`, lives there. +- Mail authentication for the apex (added 2026-09-14 — there was none before, + so every `mail@aesthetic.computer` send had been unauthenticated): + `aesthetic.computer TXT "v=spf1 include:_spf.google.com ~all"` and + `google._domainkey.aesthetic.computer TXT "v=DKIM1; …"` (key generated in + Admin → Gmail → Authenticate email; status "Authenticating email with DKIM"). + DMARC stays `p=none` for now. -- 2.54.0