Only Plusnet can fix this;
In Short:
To configure DKIM, DMARC, and SPF, one needs to modify DNS records. Since only the domain owner has control over the DNS settings for their domain, only they (or those they authorise) can configure these protocols.
DKIM, DMARC, and SPF are all email authentication protocols that help prevent email spoofing and phishing, ensuring that emails sent from a domain are legitimately from that domain. These protocols require changes to DNS (Domain Name System) records, which is why only the domain owner or someone with proper access to the domain's DNS settings can configure them. Here’s why:
1. DKIM (DomainKeys Identified Mail)
What it is: DKIM adds a digital signature to an email message. This signature is associated with the domain sending the email.
Why only the domain owner can configure it: DKIM requires you to add a special TXT record to your domain’s DNS settings that stores the public key. When an email is sent, the DKIM signature can be verified using the public key in the DNS record. Only the person with access to the DNS settings of the domain can add or modify this key.
2. DMARC (Domain-based Message Authentication, Reporting, and Conformance)
What it is: DMARC helps specify how to handle emails that fail SPF or DKIM checks. It also provides reporting to the domain owner about email authentication results.
Why only the domain owner can configure it: DMARC requires the addition of a specific TXT record to the domain's DNS. The domain owner decides the policy (e.g., reject, quarantine, or allow) for handling emails that fail SPF/DKIM checks. Since this involves access to DNS settings, only the domain owner or an authorized person can set up or modify the DMARC policy.
3. SPF (Sender Policy Framework)
What it is: SPF allows the domain owner to specify which mail servers are allowed to send emails on behalf of the domain.
Why only the domain owner can configure it: SPF works by adding a TXT record to the domain’s DNS settings. This record lists authorized IP addresses or mail servers. To update or change this record, one must have access to the DNS settings for the domain, and since the domain owner controls these settings, they are the only ones who can configure SPF.
Why is DNS Access Required?
DNS is the Key: DNS is essentially the "phonebook" of the internet. It maps domain names to IP addresses and hosts other critical information for the domain (like mail servers and authentication keys). Changes to these records can directly impact the functionality and security of the domain.
Security Implications: Allowing anyone other than the domain owner to make these changes would introduce potential risks for email spoofing and unauthorized email sending. By controlling access to DNS, the domain owner ensures that only authorized email servers can send messages on behalf of the domain, reducing the chances of impersonation and fraud.
