{"id":7328,"date":"2026-10-12T13:03:54","date_gmt":"2026-10-12T11:03:54","guid":{"rendered":"https:\/\/eu.klytic.com\/spf-dkim-dmarc-ce-protejeaza\/"},"modified":"2026-10-12T16:11:01","modified_gmt":"2026-10-12T14:11:01","slug":"spf-dkim-dmarc-ce-protejeaza","status":"publish","type":"page","link":"https:\/\/eu.klytic.com\/ro\/spf-dkim-dmarc-ce-protejeaza\/","title":{"rendered":"SPF, DKIM \u0219i DMARC: ce protejeaz\u0103 \u0219i ce nu protejeaz\u0103"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"7328\" class=\"elementor elementor-7328 elementor-6295\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d407944 e-con-full kly-g e-flex e-con e-parent\" data-id=\"d407944\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-3e11f19 e-con-full kly-g-hero e-flex e-con e-parent\" data-id=\"3e11f19\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-909e5b3 e-con-full kly-g-hero-in e-flex e-con e-parent\" data-id=\"909e5b3\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-939856e elementor-widget elementor-widget-text-editor\" data-id=\"939856e\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"kly-g-crumb\"><a href=\"\/\">Acas\u0103<\/a><span>\u203a<\/span>Ghiduri<span>\u203a<\/span>Securitatea e-mailurilor<\/p><p class=\"kly-g-pill\" style=\"--pill:#f87171\">Securitatea e-mailurilor \u00b7 \u00cen\u021belege\u021bi<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-30d5bf5 elementor-widget elementor-widget-heading\" data-id=\"30d5bf5\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">SPF, DKIM \u0219i DMARC: ce protejeaz\u0103 \u0219i ce nu protejeaz\u0103<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-df1534d elementor-widget elementor-widget-text-editor\" data-id=\"df1534d\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"kly-g-lead\">SPF spune ce servere pot trimite pentru un domeniu, DKIM semneaz\u0103 mesajul, DMARC verific\u0103 dac\u0103 unul dintre cele dou\u0103 corespunde domeniului afi\u0219at \u00een \u201eDe la\u201d \u0219i spune ce trebuie f\u0103cut \u00een caz de e\u0219ec. \u00cempreun\u0103, ele \u00eempiedic\u0103 un necunoscut s\u0103 foloseasc\u0103 exact domeniul dumneavoastr\u0103. Nu citesc textul: un domeniu asem\u0103n\u0103tor, un nume afi\u0219at \u00een\u0219el\u0103tor sau un cont compromis trec.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-99ca279 elementor-widget elementor-widget-text-editor\" data-id=\"99ca279\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"kly-g-meta\"><span>Actualizat \u00een <b>octombrie 2026<\/b><\/span><span><b>6 min<\/b><\/span><span>Surse oficiale citate<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-4a9d5f4 e-con-full kly-g-body e-flex e-con e-parent\" data-id=\"4a9d5f4\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-e60e695 e-con-full kly-g-article e-flex e-con e-parent\" data-id=\"e60e695\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-51e2f54 elementor-widget elementor-widget-text-editor\" data-id=\"51e2f54\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>SPF: cine are dreptul s\u0103 trimit\u0103<\/h2>\n<p>RFC 7208 porne\u0219te de la o constatare: nimic din protocolul de e-mail nu \u00eempiedic\u0103 un server s\u0103 anun\u021be orice adres\u0103 de expediere. SPF permite proprietarului unui domeniu s\u0103 publice \u00een DNS lista serverelor autorizate s\u0103 trimit\u0103 \u00een numele s\u0103u, iar serverului care prime\u0219te s\u0103 verifice aceast\u0103 autorizare.<\/p>\n<p>Dou\u0103 preciz\u0103ri schimb\u0103 totul:<\/p>\n<ul>\n<li>SPF verific\u0103 adresa de plic (cea din dialogul dintre servere, numit\u0103 \u201eMAIL FROM\u201d) \u0219i numele anun\u021bat de server, nu adresa pe care destinatarul o cite\u0219te \u00een \u201eDe la\u201d.<\/li>\n<li>SPF judec\u0103 ultimul server care a predat mesajul. C\u00e2nd un mesaj este redirec\u021bionat de un alt server, cel care \u00eel pred\u0103 nu mai este un server autorizat de domeniul de origine: verificarea poate e\u0219ua de\u0219i mesajul este legitim.<\/li>\n<\/ul>\n<p>Un domeniu public\u0103 o singur\u0103 \u00eenregistrare SPF. Toate sursele de trimitere figureaz\u0103 \u00een ea: serviciul de e-mail, programul de facturare, instrumentul de newsletter, CRM-ul, copiatorul care scaneaz\u0103 c\u0103tre e-mail.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0aece33 elementor-widget elementor-widget-text-editor\" data-id=\"0aece33\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>DKIM: mesajul este semnat<\/h2>\n<p>Potrivit RFC 6376, DKIM permite proprietarului unui domeniu semnatar s\u0103 \u00ee\u0219i asume o parte din responsabilitatea pentru un mesaj, prin intermediul unei semn\u0103turi criptografice. Cheia public\u0103 se afl\u0103 \u00een DNS. Verificarea semn\u0103turii stabile\u0219te c\u0103 p\u0103r\u021bile semnate nu s-au schimbat de la semnare.<\/p>\n<p>Semn\u0103tura c\u0103l\u0103tore\u0219te \u00eempreun\u0103 cu mesajul. Prin urmare, rezist\u0103 mai bine dec\u00e2t SPF la un releu sau la o redirec\u021bionare, at\u00e2ta timp c\u00e2t releul nu modific\u0103 subiectul sau corpul mesajului. O list\u0103 de distribu\u021bie care adaug\u0103 o men\u021biune \u00een josul mesajului o invalideaz\u0103.<\/p>\n<p>Ce nu face DKIM, potrivit aceluia\u0219i RFC: nu cripteaz\u0103 mesajul, un e\u0219ec nu impune respingerea lui, iar domeniul care semneaz\u0103 nu trebuie s\u0103 fie cel afi\u0219at \u00een \u201eDe la\u201d. Aceasta este exact lacuna pe care o acoper\u0103 DMARC.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4fdd1c8 elementor-widget elementor-widget-text-editor\" data-id=\"4fdd1c8\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>DMARC: alinierea \u0219i politica<\/h2>\n<p>RFC 7489 define\u0219te DMARC ca un mijloc prin care proprietarul unui domeniu poate exprima o politic\u0103 la nivelul domeniului. Mecanismul se bazeaz\u0103 pe aliniere: domeniul adresei afi\u0219ate \u00een \u201eDe la\u201d trebuie s\u0103 corespund\u0103 domeniului validat de SPF sau de DKIM. Dac\u0103 niciunul dintre ele nu este aliniat, DMARC e\u0219ueaz\u0103.<\/p>\n<p>Domeniul public\u0103 atunci ceea ce dore\u0219te:<\/p>\n<ul>\n<li><strong>none<\/strong>: nicio ac\u021biune cerut\u0103, doar observare;<\/li>\n<li><strong>quarantine<\/strong>: mesajul este tratat ca suspect;<\/li>\n<li><strong>reject<\/strong>: mesajul este respins.<\/li>\n<\/ul>\n<p>DMARC prevede \u0219i rapoarte: rapoarte agregate, care rezum\u0103 ce servere au trimis \u00een numele domeniului \u0219i cu ce rezultat, \u0219i rapoarte de e\u0219ec, mesaj cu mesaj. Ele sunt cele care permit descoperirea unui instrument uitat care trimite \u00een numele dumneavoastr\u0103 sau a cuiva care v\u0103 uzurp\u0103 domeniul.<\/p>\n<div class=\"kly-table\"><table><thead><tr><th>Mecanism<\/th><th>Ce verific\u0103<\/th><th>Ce nu analizeaz\u0103<\/th><\/tr><\/thead><tbody>\n<tr><td>SPF<\/td><td>Serverul care pred\u0103 mesajul este autorizat pentru domeniul de plic<\/td><td>Adresa afi\u0219at\u0103, con\u021binutul<\/td><\/tr>\n<tr><td>DKIM<\/td><td>Mesajul semnat nu a fost modificat; un domeniu \u00ee\u0219i asum\u0103 responsabilitatea<\/td><td>Adresa afi\u0219at\u0103, onestitatea con\u021binutului<\/td><\/tr>\n<tr><td>DMARC<\/td><td>Domeniul afi\u0219at este aliniat cu SPF sau DKIM; politica \u00een caz de e\u0219ec<\/td><td>Domeniile asem\u0103n\u0103toare, numele afi\u0219at, textul<\/td><\/tr>\n<\/tbody><\/table><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-98477f6 elementor-widget elementor-widget-text-editor\" data-id=\"98477f6\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Blocheaz\u0103 DMARC phishingul?<\/h2>\n<p>Blocheaz\u0103 o parte din uzurparea domeniului, nu phishingul \u00een general. RFC 7489 o spune explicit: DMARC nu trateaz\u0103 numele de domeniu asem\u0103n\u0103toare vizual, nici abuzul de nume afi\u0219at, iar analiza con\u021binutului iese din perimetrul s\u0103u. Nu \u00eencearc\u0103 s\u0103 rezolve toate problemele e-mailurilor frauduloase.<\/p>\n<p>Concret, DMARC nu vede:<\/p>\n<ul>\n<li><strong>un domeniu asem\u0103n\u0103tor<\/strong>: frauda\u021bul \u00ee\u0219i autentific\u0103 perfect propriul domeniu, care seam\u0103n\u0103 cu al dumneavoastr\u0103;<\/li>\n<li><strong>un nume afi\u0219at uzurpat<\/strong>: \u201eDepartamentul de contabilitate\u201d, scris de la o adres\u0103 f\u0103r\u0103 nicio leg\u0103tur\u0103;<\/li>\n<li><strong>un cont compromis<\/strong> care semneaz\u0103 corect, deoarece serverul real este cel care trimite;<\/li>\n<li><strong>un mesaj f\u0103r\u0103 leg\u0103tur\u0103 cu domeniul dumneavoastr\u0103<\/strong>: o alert\u0103 fals\u0103 de la un transportator sose\u0219te de la un domeniu care nu are nimic de-a face cu al dumneavoastr\u0103;<\/li>\n<li><strong>un domeniu f\u0103r\u0103 politic\u0103<\/strong>: dac\u0103 domeniul imitat public\u0103 \u201enone\u201d, destinatarul nu are nicio instruc\u021biune de respingere.<\/li>\n<\/ul>\n<p>Aceste cazuri \u021bin de alte analize: asem\u0103narea domeniilor, reputa\u021bia, con\u021binutul, comportamentul. Vede\u021bi <a href='\/ro\/spam-phishing-malware-cont-compromis\/'>spam, phishing, malware \u0219i cont compromis<\/a>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6052504 elementor-widget elementor-widget-text-editor\" data-id=\"6052504\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Redirec\u021bion\u0103ri \u0219i liste de distribu\u021bie: ARC<\/h2>\n<p>O redirec\u021bionare invalideaz\u0103 adesea SPF, o list\u0103 care modific\u0103 mesajul invalideaz\u0103 DKIM, iar DMARC e\u0219ueaz\u0103 atunci pentru un mesaj legitim. ARC, descris \u00een RFC 8617 (statut experimental), permite fiec\u0103rui intermediar s\u0103 ateste rezultatul autentific\u0103rii pe care l-a constatat. Serverul final poate alege s\u0103 \u021bin\u0103 cont de el.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3872752 elementor-widget elementor-widget-text-editor\" data-id=\"3872752\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Protejarea propriului domeniu, filtrarea a ceea ce sose\u0219te<\/h2>\n<p>Sunt dou\u0103 subiecte care se confund\u0103 adesea.<\/p>\n<ul>\n<li><strong>Protejarea domeniului care trimite<\/strong>: publicarea SPF, DKIM \u0219i DMARC pentru domeniul dumneavoastr\u0103, astfel \u00eenc\u00e2t ceilal\u021bi s\u0103 poat\u0103 refuza mesajele care \u00eel uzurp\u0103. Dumneavoastr\u0103 publica\u021bi; destinatarii aplic\u0103.<\/li>\n<li><strong>Filtrarea a ceea ce sose\u0219te<\/strong>: verificarea \u00eenregistr\u0103rilor celorlalte domenii pentru e-mailurile pe care le primi\u021bi, apoi aplicarea tuturor celorlalte analize.<\/li>\n<\/ul>\n<h3>Implementare treptat\u0103<\/h3>\n<ol>\n<li>Inventarul a tot ce trimite \u00een numele domeniului.<\/li>\n<li>O singur\u0103 \u00eenregistrare SPF care le autorizeaz\u0103; o semn\u0103tur\u0103 DKIM pentru fiecare serviciu capabil s\u0103 semneze.<\/li>\n<li>DMARC \u00een \u201enone\u201d, cu o adres\u0103 de primire a rapoartelor.<\/li>\n<li>Citirea rapoartelor timp de mai multe s\u0103pt\u0103m\u00e2ni; corectarea surselor uitate.<\/li>\n<li>Trecerea la \u201equarantine\u201d, apoi la \u201ereject\u201d atunci c\u00e2nd toate trimiterile legitime sunt aliniate.<\/li>\n<\/ol>\n<p>Exemplu, cu titlu ilustrativ. Un cabinet public\u0103 DMARC \u00een \u201enone\u201d \u0219i \u00ee\u0219i cite\u0219te primele rapoarte. Descoper\u0103 trei surse: serviciul s\u0103u de e-mail, bine aliniat; programul de facturare, care trimite facturile cu domeniul cabinetului f\u0103r\u0103 semn\u0103tur\u0103 DKIM; \u0219i un server necunoscut din str\u0103in\u0103tate care trimite sute de mesaje \u00een numele s\u0103u. Corecteaz\u0103 programul de facturare, a\u0219teapt\u0103 un ciclu de rapoarte curat, apoi trece la \u201equarantine\u201d: destinatarii care aplic\u0103 DMARC trateaz\u0103 de acum mesajele serverului necunoscut ca suspecte.<\/p>\n<p>\u00cen ziua \u00een care schimba\u021bi serviciul de e-mail, aceste \u00eenregistr\u0103ri se preg\u0103tesc \u00eenainte de schimbarea MX. Ghidul <a href='\/ro\/migrare-e-mail-fara-intreruperi\/'>migrarea unui serviciu de e-mail f\u0103r\u0103 \u00eentreruperi<\/a> descrie acest moment; nu \u00eel relu\u0103m aici.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c22f5bd elementor-widget elementor-widget-text-editor\" data-id=\"c22f5bd\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>\u00centreb\u0103ri frecvente<\/h2>\n<h3>Protejeaz\u0103 o politic\u0103 DMARC \u201enone\u201d?<\/h3>\n<p>Nu. Permite observarea datorit\u0103 rapoartelor. Protec\u021bia \u00eencepe cu \u201equarantine\u201d sau \u201ereject\u201d.<\/p>\n<h3>De ce e\u0219ueaz\u0103 un mesaj legitim la DMARC?<\/h3>\n<p>Cel mai adesea: o redirec\u021bionare, o list\u0103 de distribu\u021bie sau un serviciu care trimite \u00een numele dumneavoastr\u0103 f\u0103r\u0103 a fi declarat \u00een SPF \u0219i f\u0103r\u0103 a semna DKIM.<\/p>\n<h3>Serviciul nostru de e-mail nu semneaz\u0103 DKIM: ce putem face?<\/h3>\n<p>O poart\u0103 plasat\u0103 pe traseul trimiterilor poate semna \u00een locul lui. Vede\u021bi <a href='\/ro\/protejarea-serviciului-email-existent\/'>Protejarea serviciului de e-mail pe care \u00eel ave\u021bi deja<\/a>.<\/p>\n<h3>Unde se cite\u0219te rezultatul acestor controale pentru un mesaj primit?<\/h3>\n<p>\u00cen antetele mesajului. Pentru Klytic MTA, vede\u021bi <a href='\/ro\/auditarea-deciziilor-filtrului\/'>Citirea \u0219i exportul unei decizii a filtrului<\/a>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9a807c3 kly-g-klytic elementor-widget elementor-widget-text-editor\" data-id=\"9a807c3\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Unde se situeaz\u0103 Klytic<\/h2>\n<p><a href='\/ro\/klytic-mta\/'>Klytic MTA<\/a> trateaz\u0103 ambele subiecte, \u00een fa\u021ba oric\u0103rui serviciu de e-mail:<\/p>\n<ul>\n<li><strong>Essential \u0219i Advanced<\/strong>: verificare SPF, DKIM \u0219i MX; verificare DMARC, inclusiv pentru mesajele redirec\u021bionate, datorit\u0103 ARC; semnarea DKIM a trimiterilor, chiar dac\u0103 serviciul dumneavoastr\u0103 de e-mail nu o face.<\/li>\n<li><strong>Advanced<\/strong>: consol\u0103 DMARC, cu rapoartele domeniilor dumneavoastr\u0103, alerte \u0219i solu\u021bii de corectare, pentru a gestiona trecerea treptat\u0103 la \u201ereject\u201d.<\/li>\n<\/ul>\n<p>DMARC este doar un strat: Klytic MTA adaug\u0103 detectarea domeniilor-clon\u0103, a numelui afi\u0219at \u0219i a scenariilor de fraud\u0103, descris\u0103 \u00een <a href='\/ro\/frauda-ceo-uzurpare-identitate\/'>uzurparea identit\u0103\u021bii \u0219i frauda de tip CEO<\/a>.<\/p>\n<p>Dac\u0103 folosi\u021bi <a href='\/ro\/klytic-mail\/'>Klytic Mail<\/a>, SPF, DKIM \u0219i DMARC sunt configurate pentru domeniul dumneavoastr\u0103: aceasta este protec\u021bia domeniului care trimite. Klytic MTA, \u00een schimb, se poate contracta cu sau f\u0103r\u0103 Klytic Mail.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-87e1a46 kly-g-sources elementor-widget elementor-widget-text-editor\" data-id=\"87e1a46\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Surse<\/h2><p>Consultate \u00een octombrie 2026.<\/p><ul><li>RFC 7208, SPF: proprietarul unui domeniu public\u0103 gazdele autorizate s\u0103 foloseasc\u0103 domeniul s\u0103u \u00een identitatea \u201eMAIL FROM\u201d sau \u201eHELO\u201d, iar receptorul verific\u0103 aceast\u0103 autorizare. <a href='https:\/\/www.rfc-editor.org\/rfc\/rfc7208' rel='noopener' target='_blank'>rfc-editor.org<\/a><\/li><li>RFC 6376, DKIM: un domeniu \u00ee\u0219i asum\u0103 responsabilitatea pentru un mesaj printr-o semn\u0103tur\u0103 criptografic\u0103; f\u0103r\u0103 criptare, f\u0103r\u0103 respingere impus\u0103, domeniul semnatar poate fi distinct de autorul afi\u0219at. <a href='https:\/\/www.rfc-editor.org\/rfc\/rfc6376' rel='noopener' target='_blank'>rfc-editor.org<\/a><\/li><li>RFC 7489, DMARC: alinierea domeniului din \u201eFrom\u201d cu SPF sau DKIM, politicile none, quarantine \u0219i reject, rapoarte agregate \u0219i de e\u0219ec; domeniile asem\u0103n\u0103toare vizual, numele afi\u0219at \u0219i analiza con\u021binutului \u00een afara perimetrului. <a href='https:\/\/www.rfc-editor.org\/rfc\/rfc7489' rel='noopener' target='_blank'>rfc-editor.org<\/a><\/li><li>RFC 9989 (mai 2026), care \u00eenlocuie\u0219te RFC 7489: acelea\u0219i valori de politic\u0103 \u0219i acelea\u0219i excluderi (domenii asem\u0103n\u0103toare, nume afi\u0219at). <a href='https:\/\/www.rfc-editor.org\/rfc\/rfc9989' rel='noopener' target='_blank'>rfc-editor.org<\/a><\/li><li>RFC 8617, ARC (experimental): lan\u021b de transmitere autentificat; un receptor DMARC poate accepta evalu\u0103rile purtate de un lan\u021b ARC valid. <a href='https:\/\/www.rfc-editor.org\/rfc\/rfc8617' rel='noopener' target='_blank'>rfc-editor.org<\/a><\/li><li>Klytic, pagina Klytic MTA: controale de autentificare, semnarea DKIM a trimiterilor \u0219i consola DMARC din ofertele Essential \u0219i Advanced, op\u021biuni, moduri de implementare, punere \u00een func\u021biune prin MX. <a href='https:\/\/www.klytic.com\/klytic-mta\/' rel='noopener' target='_blank'>klytic.com<\/a><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-c598690 e-con-full kly-g-aside e-flex e-con e-parent\" data-id=\"c598690\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-75006f9 elementor-widget elementor-widget-html\" data-id=\"75006f9\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"html.default\">\n\t\t\t\t\t<nav class=\"kly-g-toc\" aria-label=\"Pe aceast\u0103 pagin\u0103\"><p>Pe aceast\u0103 pagin\u0103<\/p><ol><\/ol><\/nav>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-73c73e0 elementor-widget elementor-widget-text-editor\" data-id=\"73c73e0\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"kly-g-cta\"><h3>Verifica\u021bi \u0219i semna\u021bi, \u00een fa\u021ba serviciului dumneavoastr\u0103 de e-mail<\/h3><p>Klytic MTA verific\u0103 SPF, DKIM \u0219i DMARC la sosire \u0219i v\u0103 semneaz\u0103 trimiterile.<\/p><p><a class=\"kly-g-btn\" href=\"\/ro\/contact\/\">Discuta\u021bi cu un consilier \u2192<\/a><\/p><p style=\"margin:0\"><a class=\"kly-g-btn ghost\" href=\"\/ro\/klytic-mta\/\">Descoperi\u021bi Klytic MTA<\/a><\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-e2a54e3 e-con-full kly-g-related e-flex e-con e-parent\" data-id=\"e2a54e3\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-09d82dd elementor-widget elementor-widget-text-editor\" data-id=\"09d82dd\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Citi\u021bi \u0219i<\/h2><div class=\"kly-g-grid\"><a class=\"kly-g-card\" href=\"\/ro\/migrare-e-mail-fara-intreruperi\/\" style=\"--cat:#0077cc\"><span class=\"c\">Ghiduri<\/span><span class=\"t\">Cum migra\u021bi un e-mail profesional f\u0103r\u0103 \u00eentreruperi?<\/span><span class=\"q\">Coexisten\u021b\u0103, a doua trecere, TTL-ul MX, SPF, DKIM, DMARC \u0219i teste de trimitere: schimba\u021bi serviciul de e-mail f\u0103r\u0103 s\u0103 pierde\u021bi mesaje \u0219i ce r\u0103m\u00e2ne vizibil.<\/span><span class=\"m\"><span>Ghiduri<\/span><b>Citi\u021bi \u2192<\/b><\/span><\/a><a class=\"kly-g-card\" href=\"\/ro\/spam-phishing-malware-cont-compromis\/\" style=\"--cat:#dc2626\"><span class=\"c\">\u00cen\u021belege\u021bi \u00b7 Securitatea e-mailurilor<\/span><span class=\"t\">Spam, phishing, malware \u0219i cont compromis<\/span><span class=\"q\">Patru amenin\u021b\u0103ri intr\u0103 pe aceea\u0219i u\u0219\u0103 \u0219i nu se trateaz\u0103 la fel. Ce o tr\u0103deaz\u0103 pe fiecare, ce o opre\u0219te \u0219i de ce un antispam singur nu mai este suficient.<\/span><span class=\"m\"><span>6 min de lectur\u0103<\/span><b>Citi\u021bi \u2192<\/b><\/span><\/a><a class=\"kly-g-card\" href=\"\/ro\/protejarea-serviciului-email-existent\/\" style=\"--cat:#dc2626\"><span class=\"c\">\u00cen\u021belege\u021bi \u00b7 Securitatea e-mailurilor<\/span><span class=\"t\">Protejarea serviciului de e-mail pe care \u00eel ave\u021bi deja<\/span><span class=\"q\">Microsoft 365, Google Workspace, Exchange: pute\u021bi ad\u0103uga o poart\u0103 de securitate f\u0103r\u0103 a schimba serviciul de e-mail. Ce se schimb\u0103, cine configureaz\u0103, limitele.<\/span><span class=\"m\"><span>7 min de lectur\u0103<\/span><b>Citi\u021bi \u2192<\/b><\/span><\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-539316dd e-con e-atomic-element e-div-block-base e-default-div e-c9fd865-4a50 \" data-id=\"539316dd\" data-element_type=\"e-div-block\" data-e-type=\"e-div-block\" data-interaction-id=\"539316dd\" data-e-type=\"e-div-block\" data-id=\"539316dd\">\n    <div class=\"elementor-element elementor-element-4f79afcb e-con e-atomic-element e-div-block-base e-default-div e-4fa9fe-ce86 \" data-id=\"4f79afcb\" data-element_type=\"e-div-block\" data-e-type=\"e-div-block\" data-interaction-id=\"4f79afcb\" data-e-type=\"e-div-block\" data-id=\"4f79afcb\">\n    \t\t\t<p class=\"e-4dcf5c70-2ec7 e-paragraph-base e-default-p\" data-interaction-id=\"330a7a35\" data-e-type=\"widget\" data-id=\"330a7a35\">Ofert\u0103 de bun venit<\/p>\n\t\t\t\t\t<h2 data-interaction-id=\"56f1f7d5\" class=\"e-347faa43-4e20 e-heading-base e-default-h2\" data-e-type=\"widget\" data-id=\"56f1f7d5\">30 de zile de prob\u0103 gratuit\u0103, migrare asistat\u0103<\/h2>\n\t\t\t\t\t<p class=\"e-7f6310da-1caa e-paragraph-base e-default-p\" data-interaction-id=\"2ce27288\" data-e-type=\"widget\" data-id=\"2ce27288\">Ofert\u0103 de prob\u0103 f\u0103r\u0103 angajament. Un consilier v\u0103 sun\u0103 \u00eenapoi pentru a v\u0103 \u00een\u021belege nevoile \u0219i a v\u0103 preg\u0103ti spa\u021biul Klytic.<\/p>\n\t\t<div class=\"elementor-element elementor-element-35ea29a1 e-con e-atomic-element e-div-block-base e-default-div e-1cd48b22-e6da \" data-id=\"35ea29a1\" data-element_type=\"e-div-block\" data-e-type=\"e-div-block\" data-interaction-id=\"35ea29a1\" data-e-type=\"e-div-block\" data-id=\"35ea29a1\">\n    \t\t\t<a href=\"\/essai-gratuit\/\" target=\"_self\" class=\"e-4a7886e3-652d e-button-base e-default-a\" data-interaction-id=\"19bfa8f1\" data-e-type=\"widget\" data-id=\"19bfa8f1\">\n\t\ud83d\ude80 \u00cencepe\u021bi proba gratuit\u0103\n<\/a>\n\t\t\t\t\t<a href=\"\/tarifs\/\" target=\"_self\" class=\"e-137e863d-dd0d e-button-base e-default-a\" data-interaction-id=\"326d82ab\" data-e-type=\"widget\" data-id=\"326d82ab\">\n\tVede\u021bi pre\u021burile\n<\/a>\n\t\t\n<\/div>\n\n<\/div>\n\n<\/div>\n\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"_seopress_titles_title":"SPF, DKIM \u0219i DMARC: ce protejeaz\u0103 \u0219i ce nu | Klytic","_seopress_titles_desc":"SPF, DKIM \u0219i DMARC explicate: ce verific\u0103 fiecare, de ce DMARC nu blocheaz\u0103 phishingul \u00een general, redirec\u021bion\u0103ri \u0219i ARC, implementare treptat\u0103.","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"SPF, DKIM \u0219i DMARC: ce protejeaz\u0103 \u0219i ce nu | Klytic","_seopress_social_fb_desc":"SPF, DKIM \u0219i DMARC explicate: ce verific\u0103 fiecare, de ce DMARC nu blocheaz\u0103 phishingul \u00een general, redirec\u021bion\u0103ri \u0219i ARC, implementare treptat\u0103.","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"SPF, DKIM \u0219i DMARC: ce protejeaz\u0103 \u0219i ce nu | Klytic","_seopress_social_twitter_desc":"SPF, DKIM \u0219i DMARC explicate: ce verific\u0103 fiecare, de ce DMARC nu blocheaz\u0103 phishingul \u00een general, redirec\u021bion\u0103ri \u0219i ARC, implementare treptat\u0103.","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"footnotes":""},"class_list":["post-7328","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/eu.klytic.com\/ro\/wp-json\/wp\/v2\/pages\/7328","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eu.klytic.com\/ro\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/eu.klytic.com\/ro\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/eu.klytic.com\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/eu.klytic.com\/ro\/wp-json\/wp\/v2\/comments?post=7328"}],"version-history":[{"count":0,"href":"https:\/\/eu.klytic.com\/ro\/wp-json\/wp\/v2\/pages\/7328\/revisions"}],"wp:attachment":[{"href":"https:\/\/eu.klytic.com\/ro\/wp-json\/wp\/v2\/media?parent=7328"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}