salesforce.com

SPF Pass

v=spf1 include:_spf.google.com include:_spf.salesforce.com exists:%{i}._spf.corp.salesforce.com ~all

⚠ SPF uses '~all' (softfail) — unauthorized sends will be marked but not rejected.

DKIM Pass

⚠ DKIM key for selector 'google' is 1296 bits — consider upgrading to 2048+.

⚠ DKIM key for selector 's2' is 1296 bits — consider upgrading to 2048+.

DMARC Pass

v=DMARC1;p=reject;fo=1:d:s;pct=100;rua=mailto:dmarc_agg@vali.email,mailto:0e5a5c34@inbox.ondmarc.com;ruf=mailto:0e5a5c34

MX Fail

MTA-STS Fail

TLS-RPT Fail

BIMI Pass

v=BIMI1; l=https://www.salesforce.com/content/dam/web/en_us/www/images/home/bimi-salesforce-logo.svg;

⚠ BIMI record has no a= (authority certificate) tag.