diff --git a/.planning/phases/06-signing-flow/06-06-dns-check.md b/.planning/phases/06-signing-flow/06-06-dns-check.md new file mode 100644 index 0000000..46818e3 --- /dev/null +++ b/.planning/phases/06-signing-flow/06-06-dns-check.md @@ -0,0 +1,46 @@ +# DNS Email Authentication Status — teressacopelandhomes.com +Date checked: 2026-03-20 + +## Record Status + +| Record | Status | Details | +|--------|---------|---------| +| SPF | MISSING | No TXT records at root domain. No v=spf1 record found. | +| DKIM | MISSING | NXDOMAIN for all common selectors (google, default, mail, zoho). | +| DMARC | EXISTS | `v=DMARC1; p=quarantine; adkim=r; aspf=r; rua=mailto:dmarc_rua@onsecureserver.net` — note: policy is p=quarantine (strict), rua points to hosting server default (not teressa@). Recommend changing rua to teressa@teressacopelandhomes.com. | +| MX | MISSING | No MX records configured. | + +## DNS Provider +GoDaddy (nameservers: ns63.domaincontrol.com, ns64.domaincontrol.com) + +## SMTP Status +- Host: smtp.gmail.com:587 +- Credentials: PLACEHOLDER — CONTACT_EMAIL_USER and CONTACT_EMAIL_PASS in .env.local are still set to `your_email@example.com` / `your_app_password` +- SMTP test: FAILED (Invalid login — placeholder credentials) + +## Required Actions Before Sending Real Client Signing Links + +1. **SPF (CRITICAL — MISSING)**: Add TXT record at root (@): + - Value: `v=spf1 include:_spf.google.com ~all` (if using Gmail/Google Workspace) + - GoDaddy: DNS Management > Add Record > Type: TXT, Host: @ + +2. **DKIM (CRITICAL — MISSING)**: Generate DKIM key in your email provider: + - Google Workspace: Admin > Apps > Google Workspace > Gmail > Authenticate Email + - Copy the TXT record they provide and add it to GoDaddy DNS at [selector]._domainkey + +3. **DMARC (EXISTS but needs update)**: + - Current: `p=quarantine` with hosting-default rua address + - Recommended: Update rua to `mailto:teressa@teressacopelandhomes.com` + - Or add new record: `v=DMARC1; p=none; rua=mailto:teressa@teressacopelandhomes.com` + +4. **SMTP credentials (CRITICAL — MISSING)**: Update .env.local: + - `CONTACT_EMAIL_USER` = your Google/Gmail address (e.g., teressa@teressacopelandhomes.com or Gmail) + - `CONTACT_EMAIL_PASS` = Google App Password (not your Google account password) + - Generate at: https://myaccount.google.com/apppasswords + +5. **MX records**: Configure if not already done via hosting provider (needed for receiving email at the domain). + +## Verify with MXToolbox After Changes +- SPF: https://mxtoolbox.com/spf.aspx +- DKIM: https://mxtoolbox.com/dkim.aspx (enter domain + selector) +- DMARC: https://mxtoolbox.com/dmarc.aspx