codeforboston / codeforboston/maple
Set up DMARC for Sendgrid Emails
- Dominant language
- TypeScript
- Stars
- 56
- Forks
- 175
- Avg merge
- 2d 5h
- Merged PRs (30d)
- 13
Description
## Problem
Gmail/Yahoo expect clients sending more than 5,000 daily emails to enable DMARC validation. We should set up our `_dmarc` record to make Gmail happy (and, obviously, also to make it more difficult for bad actors to impersonate MAPLE).
This isn't *urgent* just yet because we expect to be well under 5,000 daily emails for a bit, but is better to set up sooner rather than later.
## Success Criteria
- [ ] Update the `_dmarc` record to configure `rua` and `rur` emails so we start receiving DMARC reports
- [ ] `rua`/`rur` should probably be `@mapletestimony.org` emails - we can configure new ones if need be, but `admin@mapletestimony.org` might work fine.
- [ ] If needed, use the Sendgrid/Valimail integration for aggregate reports. AFAIK this isn't mandatory, but may be less annoying inbox-wise.
- [ ] https://www.valimail.com/partners/twilio-sendgrid/
- [ ] Let that sit through the first wave or two of Notification Emails to confirm
- [ ] Escalate the DMARC policy to `quarantine`
- [ ] Let that sit for the next wave of Notification Emails
- [ ] Escalate the DMARC policy to `reject`
Contributor guide
Assessment
This issue has not been assessed yet.