Safe sending

Email authentication, TLS, IP number

Räftegård, Elin avatar
Written by Räftegård, Elin
Updated over a week ago

Safe sending

We care for your sendings to be safe, as your email reputation is very important to us.

Therefor, we have a well organised system of setting up email authentication, monitoring IP numbers and using TLS encryption.

We also have good tips for on how you can affect your email deliverability!


In this Article


What is Email authentication?

Email authentication helps you protect and improve your email delivery rate by preventing email fraud and identity theft. The authentication proves that your emails are being sent from you and not another illegitimate source.

We Help You Set It Up!

The common standards are SPF, DKIM and DMARC authentication. When you onboard with Efficy Marketing, we will ensure your Emails will be authenticated with SPF as well as DKIM, under our own authentication protocols. This way, your Emails are delivered right to your Profile's inbox with the Efficy Marketing seal of approval.

SPF

SPF (Sender Policy Framework) is part of our standard service offering, and our SPF record is automatically created with your sender domain when you get started.

With SPF, you specify the IP addresses (servers) allowed to send emails for your domain. It prevents forged emails from being sent from an illegitimate source impersonating your domain. SPF elevates your reputation, combats email spoofing and improves deliverability.

SPF only applies to the Sender domain, not to the From domain, which is the domain the sender sets as "From" in the actual mail. This is handled by DKIM and DMARC (see below).

DKIM

We strongly recommend that you set up DKIM authentication. (Domain Keys Identified Mail.) DKIM authentication verifies that you, as a sender, are indeed authorised to send emails on your behalf. The recipient's server then knows that you are who you claim to be.

Why is DKIM Important?

DKIM is set up with an encryption key and digital signature, and thereby proves the emails to be authentic. This significantly decreases the risk of emails landing in a spam folder or bouncing from being caught in spam filters.

Without DKIM implemented, a large part of the Emails will very likely be classed as spam when sent to recipients using Gmail, Yahoo or O365/Outlook. Large email providers are from February 2024 enforcing DKIM as a requirement for anyone sending more than 5000 emails within a single day.

Efficy Marketing Delivery department provides you with everything you need in order to get DKIM ready. Reach out to your Account Manager, who will be able to redirect you to our Delivery professionals! Expand section below to read about the set-up.

How To Set Up DKIM

What information do we need?

  1. What domain you want to send emails from.

  2. A Selector (a keyword that you choose).

Efficy Delivery team create a key pair and provide you a DKIM key.

How to implement DKIM?

  1. Publish the DKIM key in your DNS*.
    - Add key as a TXT record.
    - Sometimes the key needs to be divided into two posts.
    - If you are using several domains, you need several DKIM.

  2. Let Efficy know your DKIM key is published, and we will activate DKIM signing on our MTA.

* The Domain Name System (DNS) Server is a server, specifically used for matching website hostnames (like example.com) to their corresponding Internet Protocol or IP addresses. The DNS server contains a database of public IP addresses and their corresponding domain names.

DMARC

DMARC is a validation system for your emails which detects and prevents email spoofing. (Domain-based Message Authentication, Reporting & Conformance). It's built on top of SPF and DKIM, and while they help identify fake emails, DMARC provides reports on how and when emails are being rejected and the reason why. Also, it allows you to have more control over how receivers handle emails that failed authentication or validation.


IP numbers

IP number (Internet Protocol number) is an identification and location of a network device. All IP numbers are owned and managed by our Delivery team, who monitors them regularly, performs warm-ups, and ensures they always have a high reputation.

Additionally, the team also monitors a number of server blacklists to make sure that none of our IP addresses are listed on them. All aspects of IP management are taken care of, so you don't need to worry about your IP address having a bad reputation.


Transport Layer Security (TLS)

TLS encrypts data in transit. It encrypts data while sent over the Internet to ensure that hackers are unable to see what you transmit.

Why is TLS Important?

TLS is basically a cryptographic protocol that provides end-to-end security of data sent between applications. It is especially useful for private and sensitive information such as passwords, credit card numbers, and personal correspondence.

Efficy Marketing requires at least TLS encryption 1.2. In some jurisdictions the GDPR regulations call for a higher level of security when you send emails. Make sure to investigate regulations for your local jurisdictions.

TLS as Default Standard

  • Sending through the Email tool
    Emails sent with the Email tool have TLS encryption as the default standard. But if the recipient email server do not support TLS encryption, the email will be delivered unencrypted.


    You can make the TLS encryption forced, by requesting all emails to be sent through channels that require TLS. However, with a possible slightly decreased delivery rate (read more below).

  • Sending with Marketing Automation
    For Emails sent through our Marketing Automation tool forced TLS encryption is the default standard since they are considered personal emails.

If you wish to enable forced TLS encryption for all types of sending, please reach out to our Support Team and they will help you set it up. If you decide to, it will cover all sections in your account.

The Impact of Enabling Forced TLS encryption

When enabling forced TLS encryption, emails are sent through channels - specific email server accounts - that are configured to require TLS encryption. If the recipient mail server does not support encryption, the connection is dropped, and the mail is discarded - meaning you might experience slightly higher bounce rates.

Note: We do not offer an encryption of the email's content: If you are sending sensitive content that needs to be encrypted, solutions like PGP, S/MIME encryption or Microsoft 365 Message Encryption are recommended.


Next Step

Did this answer your question?