Where did your email actually land - inbox or spam?
APRF is a new IETF draft: publish one DNS record, get daily placement + engagement reports by email. Like Google Postmaster Tools, but from any mailbox provider.
Plain-English guide + 3 free tools:
postboxservices.com/blogs/po…
TLS certificate lifetimes are already down to 200 days. 100 in Mar 2027. 47 in Mar 2029.
Everyone read this as a web story. It's also an email story.
MX, MTA-STS, TLS-RPT, DANE and BIMI all sit on that clock.
And unlike the web, mail fails quietly.
postboxservices.com/blogs/po…
The fix:
Long term - DKIM2 (an IETF draft) binds each signature to its intended recipients.
Today - set a short DKIM signature expiry, so a captured message can't be replayed forever.
And this isn't theoretical.
In 2025, DKIM replay spoofed PayPal, Apple, and even Google's own [email protected].
Real senders. Real signatures. Fake intent.
"Just enforce DMARC" won't save you.
A replay carries a real, aligned DKIM signature, so DMARC passes via DKIM.
p=reject only blocks what fails. A replay doesn't fail.
The uncomfortable truth:
A DKIM "pass" only proves a message was signed by a domain.
Not that the domain sent THIS copy, to you.
DKIM signs the message - not the delivery.
The trick:
They type the fake charge + phone number into a field PayPal lets you fill in yourself.
PayPal then generates and DKIM-signs a 100% genuine email to an inbox they control.
They forward that signed message to thousands. The signature stays valid.
A "PayPal invoice" hits your inbox.
DKIM: ✅ valid
DMARC: ✅ passed
It genuinely came from PayPal's servers.
And it's a scam. The attacker never touched PayPal.
Here's how that's possible 🧵
We just shipped 6 free email tools. No login. No limits. No catch.
Everything we wished existed when we started in 2019 - built and free for anyone who needs it.
Thread 🧵
Check out our third interview with @damien_brnl from @MailReachApp on the importance of #email #warmup and #deliverability.
The next interview is with Anders Berggren from @halon_io
postboxservices.com/blogs/po…
#emailmarketing #emailgeeks #emailcampaign #emaildeliverability










