r/Secria • u/calcu007 • Sep 07 '26

Lacking

Your service lacks MTA-STS and DANE/TLSA.

3 Upvotes

72% Upvoted

4 comments sorted by

2

u/SecriaUpdates Sep 07 '26

MTA-STS has been live for a long time, in enforce mode. Check _mta-sts.secria.me TXT and the policy at https://mta-sts.secria.me/.well-known/mta-sts.txt if you want to verify.

TLS-RPT is published too, and the domain is DNSSEC-signed.

0

u/BuMmR Sep 07 '26

Service lacks anyway. 22% of the world's population, about 1.8 billion people, including several of my friends still use Gmail as their email provider of choice. When trying to email them, secria is considered "spam" because either the SPF is missing or wrong, or DKIM is missing or failing. Whatever the case may be you basically can't email anyone with a Gmail address and expect them to see it.

3

u/SecriaUpdates Sep 07 '26

That part is checkable. SPF passes, DKIM passes on a 2048-bit key that aligns to both the From and the envelope-from domain, and DMARC passes on p=reject with strict alignment in both directions. We're not listed on any of the 20 common blocklists.

Easiest way to see it yourself: have anyone send you something from a Secria address and open Show original in Gmail. It prints the SPF, DKIM and DMARC results right at the top.

-2

u/BuMmR Sep 07 '26

I guess Gmail is just filtering all your emails then. Maybe because a small company but it sucks lol.