Your domain is well protected. SPF, DKIM, and DMARC are configured and enforcing. unauthorized emails are rejected.
| Protocol | Status | Score |
|---|---|---|
| DMARC | Enforced | 32 / 35 |
| SPF | Soft Fail (~all) | 21 / 25 |
| DKIM | Found (google) | 17 / 20 |
| MTA-STS | Not Configured | 0 / 10 |
| TLS-RPT | Configured | 5 / 5 |
| BIMI | Configured with VMC | 5 / 5 |
Assessment of linkedin.com against major email security compliance frameworks.
| Framework | Reference | Requirements | Status |
|---|---|---|---|
| PCI DSS 4.0 | Req 5.4.1 | DMARC + SPF + DKIM | Compliant |
| Google / Yahoo Bulk Sender | 2024 Requirements | DMARC + SPF + DKIM | Compliant |
| NIST SP 800-177 | Rev. 1 | SPF + DKIM + DMARC | Compliant |
| CISA BOD 18-01 | Binding Operational Directive | DMARC (p=reject) | Compliant |
| Cyber Essentials | UK NCSC | DMARC + SPF | Compliant |
DMARC policy is set to reject, providing maximum protection against spoofing.
| Policy | reject |
| Aggregate Reporting | mailto:d@rua.agari.com,mailto:yfy3q-9359@rua.dmarc.emailanalyst.com |
| Forensic Reporting | mailto:d@ruf.agari.com |
| DKIM Alignment | relaxed |
| SPF Alignment | relaxed |
SPF record found with 3 DNS lookups and ~all.
| All Mechanism | ~all (soft fail) |
| DNS Lookups | 3/10 |
| Record Length | 236 bytes |
DKIM key found at selector "google".
| Selector | |
| Key Length | ~1024 bit |
| Algorithm | rsa-sha256 |
Transport-layer email security protocols that protect messages in transit between mail servers.
No MTA-STS record found for linkedin.com. Inbound SMTP connections are vulnerable to TLS downgrade attacks.
TLS-RPT is configured for linkedin.com. Reports on TLS delivery failures will be sent to mailto:tlsreports@linkedin.com.
| Report URI | mailto:tlsreports@linkedin.com |
BIMI is fully configured for linkedin.com with a brand logo and VMC certificate.
| Logo URL | https://media.licdn.com/media/AAYQAQQhAAgAAQAAAAAAABrLiVuNIZ3fRKGlFSn4hGZubg.svg |
| SVG Status | accessible |
| VMC Certificate | https://media.licdn.com/media/AAYABAQhAAgAAQAAAAAAAYFI0DP_wvHFSv6mYduMZuEwSA.pem |
| DMARC Prerequisite | met |
Prioritized findings and recommended fixes. These can be implemented by your internal IT team, or you can use Authex to monitor, manage, and automate these changes with our AI-powered platform starting at $9/domain per month.
| # | Protocol | Finding | Severity | Fix |
|---|---|---|---|---|
| 1 | MTA-STS | Not Configured | High | Publish an MTA-STS TXT record and host a policy file at https://mta-sts.yourdomain/.well-known/mta-sts.txt. |
| 2 | SPF | Soft Fail (~all) | Low | Consider tightening to -all for stricter enforcement alongside your DMARC policy. |
| 3 | DKIM | Found (google) | Low | Upgrade DKIM key to 2048-bit for stronger cryptographic security. |
Authex continuously monitors your email authentication, detects misconfigurations, and helps you fix them. Our AI agent handles SPF flattening, DKIM rotation, and DMARC enforcement automatically. DIY plans start at $9/domain. Managed plans include a dedicated security engineer. Visit authex.online to get started with a free scan.
| Protocol | Max Points | Weight |
|---|---|---|
| DMARC | 35 | 35% |
| SPF | 25 | 25% |
| DKIM | 20 | 20% |
| MTA-STS | 10 | 10% |
| TLS-RPT | 5 | 5% |
| BIMI | 5 | 5% |
| Grade | Score Range |
|---|---|
| A+ | 95 - 100 |
| A | 85 - 94 |
| B | 70 - 84 |
| C | 50 - 69 |
| D | 30 - 49 |
| F | 0 - 29 |