DNS & security
SSL certificates now expire faster: how to automate renewal
SSL certificates are capped at 200 days, then 100, then 47. Check who renews yours, automate it in cPanel, DirectAdmin or Certbot, and catch failures early.
DNS & security
A closer look at dns & security, with useful answers and practical next steps.
26 articles
DNS & security
SPF, DKIM and DMARC setup for small business email
Exact SPF, DKIM and DMARC records and clicks for Google Workspace, Microsoft 365 and cPanel, plus how to test, read reports and fix the classic mistakes.
DNS & security
CAA records: choose which CAs may issue SSL for your domain
Without an applicable CAA policy, CAA does not restrict which certificate authority may issue SSL for your domain. Find your real CA, add the right records in cPanel or Cloudflare, and test them.
DNS & security
Enable DNSSEC on Cloudflare without breaking your domain
Enable Cloudflare DNSSEC, publish the right DS record, verify the trust chain and diagnose SERVFAIL with a safe migration and rollback plan.
DNS & security
MTA-STS and TLS-RPT setup for a small business domain
Publish an MTA-STS policy and TLS-RPT record, validate HTTPS and SMTP TLS, and move from testing to enforce with a cache-aware recovery plan.
DNS & security
Let’s Encrypt 64-Day Certificates: Audit Renewals Before 2027
Verify the 2027 certificate change, audit Certbot and AutoSSL, check CDN and origin certificates separately, and monitor trust, hostname and expiry.
DNS & security
Search Console TXT Verification: Find the Right DNS Zone and Fix Failures
Verify your domain in Google Search Console, check the TXT record at authoritative DNS, and fix wrong-zone, hostname and caching problems without touching website or email records.
DNS & security
DMARC Reports: Read XML and Find Unaligned Senders
A DMARC report is evidence from one receiver, not your entire mail system. Read alignment, identify legitimate failing senders and plan enforcement carefully.
DNS & security
Move a Domain Without Downtime: Lock, Auth Code, 60-Day Rules
Most domain transfers fail on a 60-day lock or a bad auth code. Check both, protect your DNS, and move your domain step by step without taking the site down.