MonitorBase

Articles

Guides and explainers on e-mail authentication, certificates and uptime. Most live on the product sites; this page lists them all in one place.

36 pieces

  1. After p=reject: what to do nextWhat to keep watching once your domain is at reject: new senders, record changes, blacklists, DNSSEC, domain expiry, parked domains and TLS reports, with BIMI as the next step.DMARC3 min readmonitordmarc.eu
  2. Certificate lifetimes are getting shorterSince 15 March 2026, a new TLS certificate lasts at most 200 days. It drops to 100 days in March 2027 and 47 days in March 2029. What the CA/Browser Forum decided, and what it means for manual renewals and for monitoring.SSL2 min readmonitorssl.eu
  3. Heartbeats: know when a scheduled job silently stopsA backup or cron job can stop running without any error. A heartbeat monitor waits for a ping from the job and alerts you when the ping doesn't arrive.Uptime2 min readmonitoruptime.eu
  4. How we confirm an outage before we alert youUptime Monitor checks from Paris. When a check fails, a probe in Amsterdam checks again before we alert you, and the alert says where it failed: DNS, connect, TLS or HTTP.Uptime2 min readmonitoruptime.eu
  5. Incomplete certificate chains, explainedYour certificate is signed by an intermediate, which is signed by a root. If the server leaves out the intermediate, most browsers cope and some apps fail. What that means and how to fix it.SSL2 min readmonitorssl.eu
  6. SPF, DKIM and DMARC in plain wordsThree DNS records let receivers check that mail in your name comes from you. What each one does, in plain words, with an example of each.DMARC3 min readmonitordmarc.eu
  7. What happens after you start monitoringFrom the record you publish to the next policy step: what MonitorBase shows in the days and weeks after you add your domain, and what it asks of you.DMARC4 min readmonitordmarc.eu
  8. What happens after you start monitoring your certificatesYour first steps with SSL Monitor: add your hosts, what we check every day over a real TLS handshake, where alerts go, and what each plan includes.SSL2 min readmonitorssl.eu
  9. What happens after you start monitoring your websiteYour first half hour with Uptime Monitor: add monitors, pick the check type for each, add a heartbeat for a scheduled job, choose where alerts go and put up your first status page.Uptime3 min readmonitoruptime.eu
  10. What is BIMI, and how do you get your logo in the inbox?BIMI shows your logo next to your mail in Gmail, Apple Mail and Yahoo. What it needs, what the certificate costs, which inboxes show it, and how to check your record.DMARC3 min readmonitordmarc.eu
  11. What to put on your status pageA practical guide for a small business: which services to show, what to call them, what your customers want to know during an outage, and where to put the link.Uptime2 min readmonitoruptime.eu
  12. Why certificates expire even with auto-renewalMost certificates renew themselves. The usual ways that quietly stops working: a renewal job that stops, a server that moves, a load balancer or CDN still serving the old certificate, a DNS change that breaks validation. And what to check.SSL3 min readmonitorssl.eu
  13. Your road to p=reject, step by stepNone, then quarantine, then reject: what to fix at each stage, what MonitorBase checks before it suggests the next step, and how forwarding shows up in your reports.DMARC3 min readmonitordmarc.eu
  14. Gmail rejection codes: what 550 5.7.26 and its cousins mean, and how to fix themWhat each Gmail bounce code means (5.7.26, 5.7.27, 5.7.30, 4.7.32, 4.7.31 and more), how to find the failing sender, and the fix for each.DMARC10 min readmonitordmarc.eu
  15. How to read DMARC aggregate reports (and what to fix before you tighten)What is in a DMARC aggregate report, how to read one row, how to tell a forgotten sender from spoofing, and what to fix before quarantine and reject.DMARC9 min readmonitordmarc.eu
  16. DKIM key rotation without breaking your mailWhy DKIM keys should rotate, a realistic cadence for SMBs, and the two-selector procedure that makes rotation a non-event.DMARC1 min readmonitordmarc.eu
  17. DMARC requirements in 2026 — the current state of mandatory email authenticationWhat Google, Yahoo and Microsoft require from senders in 2026: DMARC, SPF/DKIM alignment, one-click unsubscribe and spam-rate thresholds, explained.DMARC2 min readmonitordmarc.eu
  18. Fixing the SPF 10-DNS-lookup limit: a practical guideYour SPF record breaks silently past 10 DNS lookups. How to count lookups correctly, three ways to get under the limit, and what not to do.DMARC2 min readmonitordmarc.eu
  19. Free DMARC monitoring — what actually exists, and where free endsAn honest map of free DMARC options: raw rua= reports, free tool tiers, and the point where paying beats parsing XML by hand.DMARC1 min readmonitordmarc.eu
  20. Moving DMARC from p=none to p=reject without losing mailA staged, low-risk plan for DMARC enforcement: what to check in reports at each stage, how to use pct=, and the rollback that saves your weekend.DMARC2 min readmonitordmarc.eu
  21. Parked domains are your unguarded flank — three records fix itUnused domains can send email in your name. The null MX, SPF -all and DMARC reject records every parked domain needs, and why monitoring them matters.DMARC1 min readmonitordmarc.eu
  22. Protecting your company against email spoofing and CEO fraudHow invoice fraud and CEO fraud abuse unprotected domains, what Danish businesses lose to it, and the DNS records that shut it down.DMARC1 min readmonitordmarc.eu
  23. Protecting your company against email spoofing and CEO fraudHow invoice fraud and CEO fraud abuse unprotected domains, what European businesses lose to it, and the DNS records that shut it down.DMARC2 min readmonitordmarc.eu
  24. Setting up SPF, DKIM and DMARC on Google WorkspaceExact records and admin-console steps for Google Workspace authentication, and how to keep newsletter tools aligned alongside it.DMARC1 min readmonitordmarc.eu
  25. Setting up SPF, DKIM and DMARC on Microsoft 365The exact records and admin-center steps for Microsoft 365 email authentication, plus the onmicrosoft.com and hybrid pitfalls.DMARC1 min readmonitordmarc.eu
  26. The dmarcian alternative for European SMBs and agenciesWhy teams look for dmarcian alternatives — Enterprise-gated API, USD pricing, partner-program white-label — and how MonitorBase compares, honestly.DMARCMSP2 min readmonitordmarc.eu
  27. The Google/Yahoo sender requirements, as a working checklistA practical pass/fail checklist for the Gmail and Yahoo bulk-sender requirements: authentication, alignment, unsubscribe, spam rate — with fixes.DMARC1 min readmonitordmarc.eu
  28. Webshop email deliverability: why order confirmations land in spamWebshops juggle 3–5 sending systems. Why that breaks authentication, the alignment checklist per platform, and what Black Friday does to your limits.DMARC1 min readmonitordmarc.eu
  29. BIMI explained: getting your logo into the inbox, and what it actually requiresHow BIMI works, why DMARC enforcement is a prerequisite, what the SVG Tiny PS format demands, and whether a VMC certificate is worth it.DMARC3 min readmonitordmarc.eu
  30. DKIM explained: cryptographic proof that your email is really yoursHow DKIM signing works, what selectors are, why key length matters, how forwarding breaks and survives DKIM, and how to run key rotation.DMARC4 min readmonitordmarc.eu
  31. DMARC explained: the policy that makes SPF and DKIM actually protect youHow DMARC alignment works, what p=none/quarantine/reject really do, how to read aggregate reports, and a safe staged rollout to p=reject.DMARC4 min readmonitordmarc.eu
  32. SPF explained: how receivers decide who may send as your domainWhat SPF is, how the 10-lookup limit breaks records silently, what ~all vs -all means, and how to maintain SPF as you add email services.DMARC4 min readmonitordmarc.eu
  33. The certificate lifecycle — and the quiet ways renewal automation breaksHow a certificate gets issued and renewed, why 90-day lifetimes are now standard, and the specific failure modes that cause outages.SSL2 min readmonitorssl.eu
  34. TLS-RPT & MTA-STS: closing the last unencrypted mile of emailWhy SMTP encryption is opportunistic and downgradeable, how MTA-STS enforces TLS for inbound mail, and how TLS-RPT reports the failures you would never otherwise see.DMARC3 min readmonitordmarc.eu
  35. What TLS actually does — and why a browser trusts your certificateA plain-language explanation of the TLS handshake, certificate chains, and why "SSL" in common usage means TLS.SSL2 min readmonitorssl.eu
  36. ComingWhat happens after you sign upFrom the first domain to the first report: what MonitorBase does in your first days, and what it asks of you.PlatformComing

Danish versions of the DMARC guides: monitordmarc.eu/da/guides. News and product updates are on the blog.

See where your domain stands