Paste an SPF, DMARC, DKIM-key, MTA-STS, or TLSRPT record — the bare value
or a whole dig answer — and see what it actually
says: every mechanism in plain language, DNS lookups counted against the
limit of 10, policy weaknesses flagged, key sizes checked. No DNS queries,
no server: your records never leave this page.
Get records with dig txt example.com, dig txt _dmarc.example.com, or dig txt selector._domainkey.example.com. Quoted multi-string records are concatenated automatically.
Try:
example.com. 3600 IN TXT "v=spf1 ip4:192.0.2.0/24 ip6:2001:db8::/32 include:_spf.example.net mx -all"
_dmarc.example.com. 300 IN TXT "v=DMARC1; p=quarantine; sp=reject; rua=mailto:dmarc@example.com,mailto:agg@reports.example.net!10m; adkim=s; fo=1"
mail._domainkey.example.com. 300 IN TXT "v=DKIM1; k=rsa; t=y; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/vMG1rrinYiQMthKCXZZP3ugq8QzfQRjTkm3zRtAKly0n95TUj4LUadNa8pYEmHx+jdMcBMLC6OmPiKeufpTvjBC1Ft/AHYaCaEwBD23nxH/JWQ7W5RwEkyx2VO9Q3gS5K/NZkWlRsY8D3HSPc8j5q5L8/MsCDrF1i7/BgESGvuHvqe5Pgt4nqkrASflFdQWitIwr3hDzfZPgXuEPoIKVg/xHaTszN90sbLniDWviuqL/y94YPr9fp2IdJNkYmal3" "HCGyXvp5iAhhY2PsSqPexYF9jnOHQz2Duk0R2p7HsH6glhfT8dJM/COiZtAKISYo+RMf9Tt8V5xrERP3fA4QIDAQAB"
example.com. 3600 IN TXT "v=spf1 ptr include:aspmx.example.net a:one.example a:two.example mx:three.example exists:%{i}.rbl.example include:four.example include:five.example include:six.example mx a +all redirect=other.example"