AD DNS Scavenging: Safe Aging Setup with PowerShell
Set up DNS aging and scavenging on AD-integrated zones safely: timers explained, a three-phase rollout with PowerShell, protecting static records, and events 2501/2502.
October 6, 2026
ERR_CERT_COMMON_NAME_INVALID on cPanel: Wrong Certificate Served
Fix ERR_CERT_COMMON_NAME_INVALID on cPanel: find which certificate each IP and port serves, then fix DNS, AutoSSL coverage, panel ports, mail SNI or the proxy.
October 6, 2026
200-Day SSL Certificates and DCV Reuse: What It Means for AutoSSL
The CA/B Forum schedule: 200-day certificates and DCV reuse from March 2026, then 100 and 47 days, retired email validation, DNSSEC checks, and what it means for AutoSSL and ACME.
October 6, 2026
SPF Too Many DNS Lookups: Fix PermError and the 10-Lookup Limit
Fix SPF PermError "too many DNS lookups": what counts toward the 10-lookup and void-lookup limits, how to count includes, and safe fixes.
October 6, 2026
SPF Lookup Counter: Check the 10 DNS Lookup Limit
Count every DNS lookup in a domain's SPF record against the RFC 7208 limit of 10, find void lookups, duplicates and dead terms, and get a trimmed or minimally flattened record.
October 6, 2026
DNS TXT Record Splitter: Split Long Values Into 255-Byte Strings
Split long TXT values (DKIM keys, SPF) into 255-byte quoted strings for BIND and Cloudflare, or join split strings back into one value.
October 6, 2026
Find a DKIM Selector: Headers, Panel Defaults and Key Checks
Find a domain's DKIM selector from the DKIM-Signature header, the cPanel, DirectAdmin, Microsoft 365 and Google defaults, and check that the published key is valid.
October 6, 2026
Split a 2048-bit DKIM TXT Record Over 255 Characters
Split a 2048-bit DKIM TXT record over 255 characters correctly in cPanel, DirectAdmin, Cloudflare and BIND, with lab-tested commands to build and verify the strings.
October 6, 2026
Gmail and Yahoo Bulk Sender Requirements: 2026 Host Checklist
Gmail and Yahoo bulk sender rules for 2026: the 5,000-a-day threshold, SPF, DKIM, DMARC alignment, one-click unsubscribe, 0.3% spam rate and a host checklist.
October 6, 2026
Outlook 550 5.7.515: Fix the High-Volume Sender Rejection
Fix Outlook.com 550 5.7.515 "sending domain does not meet the required authentication level": the 5,000-a-day rule, SPF, DKIM, DMARC and alignment checks.
October 6, 2026
DMARCbis (RFC 9989): What Changed and Must You Edit Records?
DMARCbis (RFC 9989, 9990, 9991) explained: new np, psd and t tags, pct/rf/ri removed, the DNS tree walk, and whether you need to edit your DMARC record.
October 6, 2026
BIMI VMC vs CMC: Requirements, DMARC and Which Inboxes Show Logos
BIMI VMC vs CMC compared: trademark vs 12-month prior use, DMARC enforcement, SVG Tiny PS rules, and which mailbox providers (Gmail, Yahoo, Apple) show the logo.
October 6, 2026