codeforboston / codeforboston/maple

Set up DMARC for Sendgrid Emails

Open
#1,784 0 comments 0 reactions 0 assignees View on GitHub
backend Following/Notifications Ready for Development tech debt
Dominant language
TypeScript
Stars
56
Forks
175
Avg merge
2d 5h
Merged PRs (30d)
13

Description

## Problem

Gmail/Yahoo expect clients sending more than 5,000 daily emails to enable DMARC validation. We should set up our `_dmarc` record to make Gmail happy (and, obviously, also to make it more difficult for bad actors to impersonate MAPLE).

This isn't *urgent* just yet because we expect to be well under 5,000 daily emails for a bit, but is better to set up sooner rather than later.

## Success Criteria
- [ ] Update the `_dmarc` record to configure `rua` and `rur` emails so we start receiving DMARC reports
- [ ] `rua`/`rur` should probably be `@mapletestimony.org` emails - we can configure new ones if need be, but `admin@mapletestimony.org` might work fine.
- [ ] If needed, use the Sendgrid/Valimail integration for aggregate reports. AFAIK this isn't mandatory, but may be less annoying inbox-wise.
- [ ] https://www.valimail.com/partners/twilio-sendgrid/
- [ ] Let that sit through the first wave or two of Notification Emails to confirm
- [ ] Escalate the DMARC policy to `quarantine`
- [ ] Let that sit for the next wave of Notification Emails
- [ ] Escalate the DMARC policy to `reject`

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.