{"id":7793,"date":"2026-10-12T13:03:54","date_gmt":"2026-10-12T11:03:54","guid":{"rendered":"https:\/\/eu.klytic.com\/?page_id=7793"},"modified":"2026-10-13T13:32:48","modified_gmt":"2026-10-13T11:32:48","slug":"spf-dkim-a-dmarc-co-chrania-a-co-nie","status":"publish","type":"page","link":"https:\/\/eu.klytic.com\/sk\/spf-dkim-a-dmarc-co-chrania-a-co-nie\/","title":{"rendered":"SPF, DKIM a DMARC: \u010do chr\u00e1nia a \u010do nechr\u00e1nia"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"7793\" class=\"elementor elementor-7793 elementor-6295\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-bc823c5 e-con-full kly-g e-flex e-con e-parent\" data-id=\"bc823c5\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-d2f24fd e-con-full kly-g-hero e-flex e-con e-parent\" data-id=\"d2f24fd\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-fcc6c8f e-con-full kly-g-hero-in e-flex e-con e-parent\" data-id=\"fcc6c8f\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-25efe72 elementor-widget elementor-widget-text-editor\" data-id=\"25efe72\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"kly-g-crumb\"><a href=\"\/sk\/\">Domov<\/a><span>\u203a<\/span><a href=\"\/sk\/prirucky\/\">Pr\u00edru\u010dky<\/a><span>\u203a<\/span><a href=\"\/sk\/prirucky\/bezpecnost-e-mailov\/\">Bezpe\u010dnos\u0165 e-mailov<\/a><\/p><p class=\"kly-g-pill\" style=\"--pill:#f87171\">Bezpe\u010dnos\u0165 e-mailov \u00b7 Pochopi\u0165<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c278f9f elementor-widget elementor-widget-heading\" data-id=\"c278f9f\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">SPF, DKIM a DMARC: \u010do chr\u00e1nia a \u010do nechr\u00e1nia<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ee2991f elementor-widget elementor-widget-text-editor\" data-id=\"ee2991f\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"kly-g-lead\">SPF ur\u010duje, ktor\u00e9 servery m\u00f4\u017eu posiela\u0165 po\u0161tu za dom\u00e9nu, DKIM spr\u00e1vu podpisuje a DMARC overuje, \u010di jeden z nich zodpoved\u00e1 dom\u00e9ne zobrazenej v poli \u201eOd\u201c, a ur\u010duje, \u010do robi\u0165 pri zlyhan\u00ed. Spolu br\u00e1nia nezn\u00e1memu odosielate\u013eovi pou\u017ei\u0165 presne va\u0161u dom\u00e9nu. Ne\u010d\u00edtaj\u00fa text: dom\u00e9na s podobn\u00fdm n\u00e1zvom, klamliv\u00e9 zobrazovan\u00e9 meno alebo kompromitovan\u00fd \u00fa\u010det prejd\u00fa.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7420671 elementor-widget elementor-widget-text-editor\" data-id=\"7420671\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"kly-g-meta\"><span>Aktualizovan\u00e9: <b>okt\u00f3ber 2026<\/b><\/span><span><b>6 min<\/b> \u010d\u00edtania<\/span><span>Citovan\u00e9 ofici\u00e1lne zdroje<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-b43047d e-con-full kly-g-body e-flex e-con e-parent\" data-id=\"b43047d\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-6c1901e e-con-full kly-g-article e-flex e-con e-parent\" data-id=\"6c1901e\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-2ba7351 elementor-widget elementor-widget-text-editor\" data-id=\"2ba7351\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>SPF: kto smie posiela\u0165<\/h2><p>RFC 7208 vych\u00e1dza z faktu, \u017ee v protokole elektronickej po\u0161ty ni\u010d nebr\u00e1ni serveru uvies\u0165 ak\u00fako\u013evek adresu odosielate\u013ea. SPF umo\u017e\u0148uje vlastn\u00edkovi dom\u00e9ny zverejni\u0165 v DNS zoznam serverov, ktor\u00e9 sm\u00fa posiela\u0165 v jeho mene, a prij\u00edmaj\u00facemu serveru toto opr\u00e1vnenie overi\u0165.<\/p><p>Dve spresnenia menia v\u0161etko:<\/p><ul><li>SPF overuje adresu ob\u00e1lky (adresu z komunik\u00e1cie medzi servermi, tzv. \u201eMAIL FROM\u201c) a meno, ktor\u00fdm sa server predstav\u00ed, nie adresu, ktor\u00fa pr\u00edjemca vid\u00ed v poli \u201eOd\u201c.<\/li><li>SPF posudzuje posledn\u00fd server, ktor\u00fd spr\u00e1vu doru\u010dil. Ke\u010f spr\u00e1vu prepo\u0161le in\u00fd server, u\u017e ju nedoru\u010duje server opr\u00e1vnen\u00fd p\u00f4vodnou dom\u00e9nou: overenie m\u00f4\u017ee zlyha\u0165, hoci je spr\u00e1va legit\u00edmna.<\/li><\/ul><p>Dom\u00e9na zverej\u0148uje iba jeden z\u00e1znam SPF. Musia v \u0148om by\u0165 v\u0161etky zdroje odosielania: elektronick\u00e1 po\u0161ta, faktura\u010dn\u00fd softv\u00e9r, n\u00e1stroj na newslettre, CRM, kop\u00edrka, ktor\u00e1 skenuje do e-mailu.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f81b90b elementor-widget elementor-widget-text-editor\" data-id=\"f81b90b\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>DKIM: spr\u00e1va je podp\u00edsan\u00e1<\/h2><p>Pod\u013ea RFC 6376 umo\u017e\u0148uje DKIM vlastn\u00edkovi podpisuj\u00facej dom\u00e9ny prevzia\u0165 \u010das\u0165 zodpovednosti za spr\u00e1vu pomocou kryptografick\u00e9ho podpisu. Verejn\u00fd k\u013e\u00fa\u010d je v DNS. Overenie podpisu preukazuje, \u017ee podp\u00edsan\u00e9 \u010dasti sa od podp\u00edsania nezmenili.<\/p><p>Podpis cestuje so spr\u00e1vou. Preto lep\u0161ie ako SPF pre\u017eije prenos cez relay alebo preposlanie, pokia\u013e tento sprostredkovate\u013e nemen\u00ed predmet ani telo spr\u00e1vy. Distribu\u010dn\u00fd zoznam, ktor\u00fd prid\u00e1 text na koniec spr\u00e1vy, ho poru\u0161\u00ed.<\/p><p>\u010co DKIM pod\u013ea tej istej RFC nerob\u00ed: spr\u00e1vu ne\u0161ifruje, zlyhanie neznamen\u00e1 povinnos\u0165 ju odmietnu\u0165 a podpisuj\u00faca dom\u00e9na nemus\u00ed by\u0165 t\u00e1, ktor\u00e1 je zobrazen\u00e1 v poli \u201eOd\u201c. Pr\u00e1ve t\u00fato medzeru vyp\u013a\u0148a DMARC.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2ff7382 elementor-widget elementor-widget-text-editor\" data-id=\"2ff7382\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>DMARC: zarovnanie a politika<\/h2><p>RFC 7489 definuje DMARC ako sp\u00f4sob, ktor\u00fdm vlastn\u00edk dom\u00e9ny vyjadr\u00ed politiku na \u00farovni dom\u00e9ny. Mechanizmus stoj\u00ed na zarovnan\u00ed: dom\u00e9na adresy zobrazenej v poli \u201eOd\u201c mus\u00ed zodpoveda\u0165 dom\u00e9ne overenej cez SPF alebo DKIM. Ak nie je zarovnan\u00fd ani jeden, DMARC zlyh\u00e1.<\/p><p>Dom\u00e9na potom zverejn\u00ed, \u010do po\u017eaduje:<\/p><ul><li><strong>none<\/strong>: \u017eiadna akcia, iba sledovanie;<\/li><li><strong>quarantine<\/strong>: so spr\u00e1vou zaobch\u00e1dza\u0165 ako s podozrivou;<\/li><li><strong>reject<\/strong>: spr\u00e1vu odmietnu\u0165.<\/li><\/ul><p>DMARC obsahuje aj reporty: s\u00fahrnn\u00e9 reporty, ktor\u00e9 zhrn\u00fa, ktor\u00e9 servery posielali v mene dom\u00e9ny a s ak\u00fdm v\u00fdsledkom, a reporty o zlyhan\u00ed pre jednotliv\u00e9 spr\u00e1vy. Pr\u00e1ve v\u010faka nim odhal\u00edte zabudnut\u00fd n\u00e1stroj, ktor\u00fd posiela za v\u00e1s, alebo niekoho, kto zneu\u017e\u00edva va\u0161u dom\u00e9nu.<\/p><div class=\"kly-table\"><table><thead><tr><th>Mechanizmus<\/th><th>\u010co overuje<\/th><th>\u010co nesleduje<\/th><\/tr><\/thead><tbody><tr><td>SPF<\/td><td>Server, ktor\u00fd spr\u00e1vu doru\u010duje, je opr\u00e1vnen\u00fd pre dom\u00e9nu ob\u00e1lky<\/td><td>Zobrazen\u00fa adresu, obsah<\/td><\/tr><tr><td>DKIM<\/td><td>Podp\u00edsan\u00e1 spr\u00e1va nebola zmenen\u00e1; dom\u00e9na za \u0148u preber\u00e1 zodpovednos\u0165<\/td><td>Zobrazen\u00fa adresu, poctivos\u0165 obsahu<\/td><\/tr><tr><td>DMARC<\/td><td>Zobrazen\u00e1 dom\u00e9na je zarovnan\u00e1 s SPF alebo DKIM; politika pri zlyhan\u00ed<\/td><td>Dom\u00e9ny s podobn\u00fdm n\u00e1zvom, zobrazovan\u00e9 meno, text<\/td><\/tr><\/tbody><\/table><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8a43814 elementor-widget elementor-widget-text-editor\" data-id=\"8a43814\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Zastav\u00ed DMARC phishing?<\/h2><p>Zastav\u00ed \u010das\u0165 zneu\u017eitia dom\u00e9ny, nie phishing vo v\u0161eobecnosti. RFC 7489 to hovor\u00ed v\u00fdslovne: DMARC nerie\u0161i vizu\u00e1lne podobn\u00e9 dom\u00e9nov\u00e9 men\u00e1 ani zneu\u017eitie zobrazovan\u00e9ho mena a anal\u00fdza obsahu je mimo jeho rozsahu. Nesna\u017e\u00ed sa vyrie\u0161i\u0165 v\u0161etky probl\u00e9my podvodnej po\u0161ty.<\/p><p>Konkr\u00e9tne DMARC nevid\u00ed:<\/p><ul><li><strong>dom\u00e9nu s podobn\u00fdm n\u00e1zvom<\/strong>: podvodn\u00edk bezchybne over\u00ed vlastn\u00fa dom\u00e9nu, ktor\u00e1 sa podob\u00e1 na va\u0161u;<\/li><li><strong>zneu\u017eit\u00e9 zobrazovan\u00e9 meno<\/strong>: \u201e\u00da\u010dtovn\u00e9 oddelenie\u201c p\u00ed\u0161e z adresy, ktor\u00e1 s n\u00edm nes\u00favis\u00ed;<\/li><li><strong>kompromitovan\u00fd \u00fa\u010det<\/strong>, ktor\u00fd podpisuje spr\u00e1vne, preto\u017ee posiela skuto\u010dn\u00fd server;<\/li><li><strong>spr\u00e1vu, ktor\u00e1 s va\u0161ou dom\u00e9nou nes\u00favis\u00ed<\/strong>: falo\u0161n\u00e9 upozornenie od prepravcu prich\u00e1dza z dom\u00e9ny, ktor\u00e1 nem\u00e1 s va\u0161ou ni\u010d spolo\u010dn\u00e9;<\/li><li><strong>dom\u00e9nu bez politiky<\/strong>: ak napodob\u0148ovan\u00e1 dom\u00e9na zverej\u0148uje \u201enone\u201c, pr\u00edjemca nem\u00e1 pokyn na odmietnutie.<\/li><\/ul><p>Tieto pr\u00edpady patria in\u00fdm anal\u00fdzam: podobnos\u0165 dom\u00e9n, reput\u00e1cia, obsah, spr\u00e1vanie. Pozrite <a href='\/sk\/spam-phishing-malver-a-kompromitovany-ucet\/'>spam, phishing, malv\u00e9r a kompromitovan\u00fd \u00fa\u010det<\/a>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d10273e elementor-widget elementor-widget-text-editor\" data-id=\"d10273e\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Preposielanie a distribu\u010dn\u00e9 zoznamy: ARC<\/h2><p>Preposlanie \u010dasto poru\u0161\u00ed SPF, zoznam, ktor\u00fd men\u00ed spr\u00e1vu, poru\u0161\u00ed DKIM, a DMARC potom zlyh\u00e1 pri legit\u00edmnej spr\u00e1ve. ARC, op\u00edsan\u00fd v RFC 8617 (experiment\u00e1lny status), umo\u017e\u0148uje ka\u017ed\u00e9mu sprostredkovate\u013eovi potvrdi\u0165 v\u00fdsledok overenia, ktor\u00fd zistil. Cie\u013eov\u00fd server sa m\u00f4\u017ee rozhodn\u00fa\u0165 ho zoh\u013eadni\u0165.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e2b4228 elementor-widget elementor-widget-text-editor\" data-id=\"e2b4228\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Chr\u00e1ni\u0165 vlastn\u00fa dom\u00e9nu, filtrova\u0165 prich\u00e1dzaj\u00facu po\u0161tu<\/h2><p>Tieto dve t\u00e9my sa \u010dasto zamie\u0148aj\u00fa.<\/p><ul><li><strong>Ochrana dom\u00e9ny, ktor\u00e1 posiela<\/strong>: zverejni\u0165 SPF, DKIM a DMARC pre va\u0161u dom\u00e9nu, aby ostatn\u00ed mohli odmieta\u0165 spr\u00e1vy, ktor\u00e9 ju zneu\u017e\u00edvaj\u00fa. Zverej\u0148ujete vy; uplat\u0148uj\u00fa pr\u00edjemcovia.<\/li><li><strong>Filtrovanie prich\u00e1dzaj\u00facej po\u0161ty<\/strong>: overova\u0165 z\u00e1znamy ostatn\u00fdch dom\u00e9n v po\u0161te, ktor\u00fa prij\u00edmate, a potom uplatni\u0165 v\u0161etky ostatn\u00e9 anal\u00fdzy.<\/li><\/ul><h3>Postupn\u00e9 nasadenie<\/h3><ol><li>Invent\u00e1r v\u0161etk\u00e9ho, \u010do posiela v mene dom\u00e9ny.<\/li><li>Jedin\u00fd z\u00e1znam SPF, ktor\u00fd ich povo\u013euje; podpis DKIM pre ka\u017ed\u00fa slu\u017ebu, ktor\u00e1 vie podpisova\u0165.<\/li><li>DMARC v re\u017eime \u201enone\u201c s adresou na prij\u00edmanie reportov.<\/li><li>Nieko\u013ekot\u00fd\u017ed\u0148ov\u00e9 \u010d\u00edtanie reportov; oprava zabudnut\u00fdch zdrojov.<\/li><li>Prechod na \u201equarantine\u201c a potom na \u201ereject\u201c, ke\u010f s\u00fa v\u0161etky legit\u00edmne zdroje zarovnan\u00e9.<\/li><\/ol><p>Pr\u00edklad na ilustr\u00e1ciu. Kancel\u00e1ria zverejn\u00ed DMARC v re\u017eime \u201enone\u201c a \u010d\u00edta prv\u00e9 reporty. Odhal\u00ed tri zdroje: svoju elektronick\u00fa po\u0161tu, spr\u00e1vne zarovnan\u00fa; faktura\u010dn\u00fd softv\u00e9r, ktor\u00fd posiela fakt\u00fary s dom\u00e9nou kancel\u00e1rie bez podpisu DKIM; a nezn\u00e1my server v zahrani\u010d\u00ed, ktor\u00fd v jej mene posiela stovky spr\u00e1v. Oprav\u00ed faktura\u010dn\u00fd softv\u00e9r, po\u010dk\u00e1 na \u010dist\u00fd cyklus reportov a prejde na \u201equarantine\u201c: pr\u00edjemcovia, ktor\u00ed uplat\u0148uj\u00fa DMARC, odteraz zaobch\u00e1dzaj\u00fa so spr\u00e1vami z nezn\u00e1meho servera ako s podozriv\u00fdmi.<\/p><p>Pri zmene elektronickej po\u0161ty sa tieto z\u00e1znamy pripravuj\u00fa pred zmenou MX. Tento okamih opisuje pr\u00edru\u010dka <a href='\/sk\/migracia-e-mailu-bez-prerusenia\/'>migr\u00e1cia elektronickej po\u0161ty bez preru\u0161enia<\/a>; tu sa neopakuje.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-34c74ab elementor-widget elementor-widget-text-editor\" data-id=\"34c74ab\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>\u010cast\u00e9 ot\u00e1zky<\/h2><h3>Chr\u00e1ni politika DMARC \u201enone\u201c?<\/h3><p>Nie. Umo\u017e\u0148uje sledovanie v\u010faka reportom. Ochrana za\u010d\u00edna s \u201equarantine\u201c alebo \u201ereject\u201c.<\/p><h3>Pre\u010do legit\u00edmna spr\u00e1va neprejde cez DMARC?<\/h3><p>Naj\u010dastej\u0161ie kv\u00f4li preposlaniu, distribu\u010dn\u00e9mu zoznamu alebo slu\u017ebe, ktor\u00e1 posiela za v\u00e1s bez toho, aby bola uveden\u00e1 v SPF alebo podpisovala cez DKIM.<\/p><h3>Na\u0161a elektronick\u00e1 po\u0161ta nepodpisuje cez DKIM: \u010do robi\u0165?<\/h3><p>Br\u00e1na umiestnen\u00e1 na ceste odch\u00e1dzaj\u00facej po\u0161ty m\u00f4\u017ee podpisova\u0165 namiesto nej. Pozrite <a href='\/sk\/ochrana-elektronickej-posty-ktoru-uz-mate\/'>Ochrana elektronickej po\u0161ty, ktor\u00fa u\u017e m\u00e1te<\/a>.<\/p><h3>Kde si pri prijatej spr\u00e1ve pre\u010d\u00edta\u0165 v\u00fdsledok t\u00fdchto kontrol?<\/h3><p>V hlavi\u010dk\u00e1ch spr\u00e1vy. Pre Klytic MTA pozrite <a href='\/sk\/citanie-a-export-rozhodnutia-filtra\/'>Ako \u010d\u00edta\u0165 a exportova\u0165 rozhodnutie filtra<\/a>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3bf99ea kly-g-klytic elementor-widget elementor-widget-text-editor\" data-id=\"3bf99ea\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Kde stoj\u00ed Klytic<\/h2><p><a href='\/sk\/klytic-mta\/'>Klytic MTA<\/a> rie\u0161i obe t\u00e9my, pred akouko\u013evek elektronickou po\u0161tou:<\/p><ul><li><strong>Essential a Advanced<\/strong>: kontrola SPF, DKIM a MX; overenie DMARC aj pre preposlan\u00e9 spr\u00e1vy v\u010faka ARC; podpis DKIM odch\u00e1dzaj\u00facej po\u0161ty, aj ke\u010f to va\u0161a elektronick\u00e1 po\u0161ta nerob\u00ed.<\/li><li><strong>Advanced<\/strong>: konzola DMARC s reportmi va\u0161ich dom\u00e9n, upozorneniami a n\u00e1vrhmi opr\u00e1v, na riadenie postupn\u00e9ho prechodu na \u201ereject\u201c.<\/li><\/ul><p>DMARC je iba jedna vrstva: Klytic MTA prid\u00e1va detekciu dom\u00e9n s podobn\u00fdm n\u00e1zvom, zobrazovan\u00e9ho mena a scen\u00e1rov podvodov, op\u00edsan\u00fa v pr\u00edru\u010dke <a href='\/sk\/zneuzitie-identity-a-podvod-s-falosnym-riaditelom\/'>zneu\u017eitie identity a podvod s falo\u0161n\u00fdm riadite\u013eom<\/a>.<\/p><p>Ak pou\u017e\u00edvate <a href='\/sk\/klytic-mail\/'>Klytic Mail<\/a>, SPF, DKIM a DMARC s\u00fa pre va\u0161u dom\u00e9nu nastaven\u00e9: to je ochrana dom\u00e9ny, ktor\u00e1 posiela. Klytic MTA si m\u00f4\u017eete objedna\u0165 s Klytic Mail aj bez neho.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-43ac7c2 kly-g-sources elementor-widget elementor-widget-text-editor\" data-id=\"43ac7c2\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Zdroje<\/h2><p>Overen\u00e9 v okt\u00f3bri 2026.<\/p><ul><li>RFC 7208, SPF: vlastn\u00edk dom\u00e9ny zverej\u0148uje hostite\u013eov opr\u00e1vnen\u00fdch pou\u017e\u00edva\u0165 jeho dom\u00e9nu v identite \u201eMAIL FROM\u201c alebo \u201eHELO\u201c a pr\u00edjemca toto opr\u00e1vnenie overuje. <a href='https:\/\/www.rfc-editor.org\/rfc\/rfc7208' rel='noopener' target='_blank'>rfc-editor.org<\/a><\/li><li>RFC 6376, DKIM: dom\u00e9na preber\u00e1 zodpovednos\u0165 za spr\u00e1vu kryptografick\u00fdm podpisom; \u017eiadne \u0161ifrovanie, \u017eiadne povinn\u00e9 odmietnutie, podpisuj\u00faca dom\u00e9na sa m\u00f4\u017ee l\u00ed\u0161i\u0165 od zobrazen\u00e9ho autora. <a href='https:\/\/www.rfc-editor.org\/rfc\/rfc6376' rel='noopener' target='_blank'>rfc-editor.org<\/a><\/li><li>RFC 7489, DMARC: zarovnanie dom\u00e9ny \u201eFrom\u201c s SPF alebo DKIM, politiky none, quarantine a reject, s\u00fahrnn\u00e9 reporty a reporty o zlyhan\u00ed; vizu\u00e1lne podobn\u00e9 dom\u00e9ny, zobrazovan\u00e9 meno a anal\u00fdza obsahu mimo rozsahu. <a href='https:\/\/www.rfc-editor.org\/rfc\/rfc7489' rel='noopener' target='_blank'>rfc-editor.org<\/a><\/li><li>RFC 9989 (m\u00e1j 2026), ktor\u00e1 nahr\u00e1dza RFC 7489: rovnak\u00e9 hodnoty politiky a rovnak\u00e9 v\u00fdnimky (podobn\u00e9 dom\u00e9ny, zobrazovan\u00e9 meno). <a href='https:\/\/www.rfc-editor.org\/rfc\/rfc9989' rel='noopener' target='_blank'>rfc-editor.org<\/a><\/li><li>RFC 8617, ARC (experiment\u00e1lny): overen\u00fd re\u0165azec prenosu; pr\u00edjemca DMARC m\u00f4\u017ee prija\u0165 hodnotenia, ktor\u00e9 nesie platn\u00fd re\u0165azec ARC. <a href='https:\/\/www.rfc-editor.org\/rfc\/rfc8617' rel='noopener' target='_blank'>rfc-editor.org<\/a><\/li><li>Klytic, str\u00e1nka Klytic MTA: kontroly overenia, podpis DKIM odch\u00e1dzaj\u00facej po\u0161ty a konzola DMARC v ponuk\u00e1ch Essential a Advanced, volite\u013en\u00e9 slu\u017eby, sp\u00f4soby nasadenia, uvedenie do prev\u00e1dzky cez MX. <a href='https:\/\/www.klytic.com\/klytic-mta\/' rel='noopener' target='_blank'>klytic.com<\/a><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-829be78 e-con-full kly-g-aside e-flex e-con e-parent\" data-id=\"829be78\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-fd83e3e elementor-widget elementor-widget-html\" data-id=\"fd83e3e\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"html.default\">\n\t\t\t\t\t<nav class=\"kly-g-toc\" aria-label=\"Na tejto str\u00e1nke\"><p>Na tejto str\u00e1nke<\/p><ol><\/ol><\/nav>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0daed68 elementor-widget elementor-widget-text-editor\" data-id=\"0daed68\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"kly-g-cta\"><h3>Overovanie a podpisovanie pred va\u0161ou elektronickou po\u0161tou<\/h3><p>Klytic MTA overuje SPF, DKIM a DMARC pri prijat\u00ed a podpisuje va\u0161u odch\u00e1dzaj\u00facu po\u0161tu.<\/p><p><a class=\"kly-g-btn\" href=\"\/sk\/kontakt\/\">Hovori\u0165 s konzultantom \u2192<\/a><\/p><p style=\"margin:0\"><a class=\"kly-g-btn ghost\" href=\"\/sk\/klytic-mta\/\">Spozna\u0165 Klytic MTA<\/a><\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-12c0880 e-con-full kly-g-related e-flex e-con e-parent\" data-id=\"12c0880\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-8de7b0d elementor-widget elementor-widget-text-editor\" data-id=\"8de7b0d\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Pre\u010d\u00edtajte si aj<\/h2><div class=\"kly-g-grid\"><a class=\"kly-g-card\" href=\"\/sk\/migracia-e-mailu-bez-prerusenia\/\" style=\"--cat:#0077cc\"><span class=\"c\">Migr\u00e1cia<\/span><span class=\"t\">Ako migrova\u0165 firemn\u00fd e-mail bez preru\u0161enia?<\/span><span class=\"q\">S\u00fabe\u017en\u00e1 prev\u00e1dzka, druh\u00fd prechod, TTL z\u00e1znamu MX, SPF, DKIM, DMARC a testy odosielania: zmena e-mailovej slu\u017eby bez straty po\u0161ty a \u010do zostane vidite\u013en\u00e9.<\/span><span class=\"m\"><span>Pr\u00edru\u010dka<\/span><b>\u010c\u00edta\u0165 \u2192<\/b><\/span><\/a><a class=\"kly-g-card\" href=\"\/sk\/spam-phishing-malver-a-kompromitovany-ucet\/\" style=\"--cat:#dc2626\"><span class=\"c\">Pochopi\u0165 \u00b7 Bezpe\u010dnos\u0165 e-mailov<\/span><span class=\"t\">Spam, phishing, malv\u00e9r a kompromitovan\u00fd \u00fa\u010det<\/span><span class=\"q\">\u0160tyri hrozby prich\u00e1dzaj\u00fa rovnak\u00fdmi dverami a nerie\u0161ia sa rovnako. \u010co ka\u017ed\u00fa prezr\u00e1dza, \u010do ju zastav\u00ed a pre\u010do u\u017e samotn\u00fd antispam nesta\u010d\u00ed.<\/span><span class=\"m\"><span>6 min \u010d\u00edtania<\/span><b>\u010c\u00edta\u0165 \u2192<\/b><\/span><\/a><a class=\"kly-g-card\" href=\"\/sk\/ochrana-elektronickej-posty-ktoru-uz-mate\/\" style=\"--cat:#dc2626\"><span class=\"c\">Pochopi\u0165 \u00b7 Bezpe\u010dnos\u0165 e-mailov<\/span><span class=\"t\">Ochrana elektronickej po\u0161ty, ktor\u00fa u\u017e m\u00e1te<\/span><span class=\"q\">Microsoft 365, Google Workspace, Exchange: bezpe\u010dnostn\u00fa br\u00e1nu mo\u017eno prida\u0165 bez zmeny elektronickej po\u0161ty. \u010co sa zmen\u00ed, kto to nastav\u00ed a ak\u00e9 s\u00fa obmedzenia.<\/span><span class=\"m\"><span>7 min \u010d\u00edtania<\/span><b>\u010c\u00edta\u0165 \u2192<\/b><\/span><\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-539316dd e-con e-atomic-element e-div-block-base e-default-div e-c9fd865-4a50 \" data-id=\"539316dd\" data-element_type=\"e-div-block\" data-e-type=\"e-div-block\" data-interaction-id=\"539316dd\" data-e-type=\"e-div-block\" data-id=\"539316dd\">\n    <div class=\"elementor-element elementor-element-4f79afcb e-con e-atomic-element e-div-block-base e-default-div e-4fa9fe-ce86 \" data-id=\"4f79afcb\" data-element_type=\"e-div-block\" data-e-type=\"e-div-block\" data-interaction-id=\"4f79afcb\" data-e-type=\"e-div-block\" data-id=\"4f79afcb\">\n    \t\t\t<p class=\"e-4dcf5c70-2ec7 e-paragraph-base e-default-p\" data-interaction-id=\"330a7a35\" data-e-type=\"widget\" data-id=\"330a7a35\">Uv\u00edtacia ponuka<\/p>\n\t\t\t\t\t<h2 data-interaction-id=\"56f1f7d5\" class=\"e-347faa43-4e20 e-heading-base e-default-h2\" data-e-type=\"widget\" data-id=\"56f1f7d5\">30 dn\u00ed sk\u00fa\u0161obnej verzie zdarma, migr\u00e1cia s asistenciou<\/h2>\n\t\t\t\t\t<p class=\"e-7f6310da-1caa e-paragraph-base e-default-p\" data-interaction-id=\"2ce27288\" data-e-type=\"widget\" data-id=\"2ce27288\">Sk\u00fa\u0161obn\u00e1 ponuka bez z\u00e1v\u00e4zkov. Poradca v\u00e1m zavol\u00e1, aby pochopil va\u0161e potreby a pripravil va\u0161e prostredie Klytic.<\/p>\n\t\t<div class=\"elementor-element elementor-element-35ea29a1 e-con e-atomic-element e-div-block-base e-default-div e-1cd48b22-e6da \" data-id=\"35ea29a1\" data-element_type=\"e-div-block\" data-e-type=\"e-div-block\" data-interaction-id=\"35ea29a1\" data-e-type=\"e-div-block\" data-id=\"35ea29a1\">\n    \t\t\t<a href=\"\/essai-gratuit\/\" target=\"_self\" class=\"e-4a7886e3-652d e-button-base e-default-a\" data-interaction-id=\"19bfa8f1\" data-e-type=\"widget\" data-id=\"19bfa8f1\">\n\t\ud83d\ude80 Spusti\u0165 sk\u00fa\u0161obn\u00fa verziu zdarma\n<\/a>\n\t\t\t\t\t<a href=\"\/tarifs\/\" target=\"_self\" class=\"e-137e863d-dd0d e-button-base e-default-a\" data-interaction-id=\"326d82ab\" data-e-type=\"widget\" data-id=\"326d82ab\">\n\tZobrazi\u0165 cenn\u00edk\n<\/a>\n\t\t\n<\/div>\n\n<\/div>\n\n<\/div>\n\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"_seopress_titles_title":"SPF, DKIM a DMARC: \u010do chr\u00e1nia a \u010do nie | Klytic","_seopress_titles_desc":"SPF, DKIM a DMARC vysvetlen\u00e9: \u010do ka\u017ed\u00fd overuje, pre\u010do DMARC vo v\u0161eobecnosti nezastav\u00ed phishing, preposielanie a ARC, postupn\u00e9 nasadenie.","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"SPF, DKIM a DMARC: \u010do chr\u00e1nia a \u010do nie | Klytic","_seopress_social_fb_desc":"SPF, DKIM a DMARC vysvetlen\u00e9: \u010do ka\u017ed\u00fd overuje, pre\u010do DMARC vo v\u0161eobecnosti nezastav\u00ed phishing, preposielanie a ARC, postupn\u00e9 nasadenie.","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"SPF, DKIM a DMARC: \u010do chr\u00e1nia a \u010do nie | Klytic","_seopress_social_twitter_desc":"SPF, DKIM a DMARC vysvetlen\u00e9: \u010do ka\u017ed\u00fd overuje, pre\u010do DMARC vo v\u0161eobecnosti nezastav\u00ed phishing, preposielanie a ARC, postupn\u00e9 nasadenie.","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"footnotes":""},"class_list":["post-7793","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/eu.klytic.com\/sk\/wp-json\/wp\/v2\/pages\/7793","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eu.klytic.com\/sk\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/eu.klytic.com\/sk\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/eu.klytic.com\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/eu.klytic.com\/sk\/wp-json\/wp\/v2\/comments?post=7793"}],"version-history":[{"count":1,"href":"https:\/\/eu.klytic.com\/sk\/wp-json\/wp\/v2\/pages\/7793\/revisions"}],"predecessor-version":[{"id":8499,"href":"https:\/\/eu.klytic.com\/sk\/wp-json\/wp\/v2\/pages\/7793\/revisions\/8499"}],"wp:attachment":[{"href":"https:\/\/eu.klytic.com\/sk\/wp-json\/wp\/v2\/media?parent=7793"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}