Aufsichtsbehörde über die Bundesanwaltschaft AB-BA

ab-ba.ch

29/100Grade D

Protection against forged senders: not protected (monitoring only)

Points per criterion

✕DMARC in monitoring mode only (p=none)

p=none provides reports but does not reject a single forgery. The goal is p=reject.
!DMARC without reporting (no rua)

Without aggregate reports it stays invisible who sends in the domain's name.
!No DKIM key found

No key was found under more than 100 common selectors. A custom selector is possible, but without DKIM there is no cryptographic sender check.
!DNSSEC not enabled

Without DNSSEC, DNS answers can be forged in transit. DANE requires DNSSEC.
!No MTA-STS

Without MTA-STS (or DANE) inbound encryption is not enforced; an attacker on the path can downgrade to plain text.
!No TLS reporting (TLS-RPT)

Without TLS-RPT the organisation does not learn when senders fail to deliver encrypted.

Pref	Host	IP	Network	Country	TLSA
10	`mail.ab-ba.ch`	`80.74.142.100`	AS21069 ASN-METANET - METANET AG	CH	–

v=spf1 include:_spf.sui-inter.net +mx +a ~all

v=DMARC1; p=none

No DKIM key found

Checked: 100 common selectors. Keys under custom selectors remain invisible.

Raw data

ab-ba.ch. IN MX 10 mail.ab-ba.ch.
ab-ba.ch. IN TXT "v=spf1 include:_spf.sui-inter.net +mx +a ~all"
_dmarc.ab-ba.ch. IN TXT "v=DMARC1; p=none"