A closer look at dns & security, with useful answers and practical next steps.
42 articles
New publicly trusted TLS server certificates have a 200-day maximum, with later caps of 100 and 47 days. Check renewal ownership, deployment and alerts; existing certificates retain their expiry dates.
Exact SPF, DKIM and DMARC records and clicks for Google Workspace, Microsoft 365 and cPanel, plus how to test, read reports and fix the classic mistakes.
Choose the right CAA policy for your host, CDN and subdomains. Add it in cPanel, Cloudflare or a zone file, then check DNS, wildcard permissions and the renewal path.
Enable Cloudflare DNSSEC, publish the right DS record, verify the trust chain and diagnose SERVFAIL with a safe migration and rollback plan.
Publish an MTA-STS policy and TLS-RPT record, validate HTTPS and SMTP TLS, and move from testing to enforce with a cache-aware recovery plan.
Verify the 2027 certificate change, audit Certbot and AutoSSL, check CDN and origin certificates separately, and monitor trust, hostname and expiry.
Verify Google Search Console with TXT in Cloudflare, cPanel, GoDaddy, Namecheap or Hostinger. Fix naming, TTL, CNAME, account and DNS errors.
A DMARC report is evidence from one receiver, not your entire mail system. Read alignment, identify legitimate failing senders and plan enforcement carefully.
Check transfer eligibility and auth codes, protect your DNS and email, and verify the result before changing registrars.
Explore hosting built for your next chapter.
