Practical guides on DNS records, propagation, and keeping your domains healthy.
Product Guide
If your DNS provider isn't one we connect to directly, a standard BIND zone file export gets you the same automatic host import. Here's what the file needs to look like and what happens once it's uploaded.
DNS Explained
CAA records let you specify which certificate authorities are allowed to issue TLS certificates for your domain, closing off every other CA as an option. Here's how they work, how to read one, and what an unexpected certificate has to do with them.
DNS Explained
Every DNS zone has exactly one SOA record, and most people never look at it. Here's what its fields actually mean, why the serial number matters more than anything else in it, and when a stale SOA is the real cause of a DNS problem.
DNS Explained
SPF and DKIM check whether a message is authorized and unmodified. DMARC is what tells receiving servers what to do about it, and it's the record most domains set up wrong or not at all. Here's the full anatomy of a DMARC record and how to roll one out safely.
Product Guide
Your NS records can stay exactly the same while one of your nameservers quietly stops answering queries. Here's the failure mode record-change monitoring misses, and how reachability checks catch it.
DNS Explained
DKIM adds a cryptographic signature to outgoing email so receiving servers can verify it wasn't altered in transit. Here's how the signing and verification actually works, what the DNS record looks like, and what changes when it breaks.
DNS Explained
If a tool or mail server has flagged your domain for a missing SPF record, here is what to check, how to read what you find, and how to add one that actually works.
DNS Explained
A CNAME record is an alias that points one hostname to another. They're everywhere in modern infrastructure, and they carry a risk most people don't know about until it's too late.
DNS Explained
A and AAAA records map domain names to IP addresses, making your website reachable. Here's how they work, what the difference between IPv4 and IPv6 is, and why an unexpected change is one of the most disruptive things that can happen to a domain.
DNS Explained
MX records tell the internet which servers accept email for your domain. Here's how they work, what the priority numbers mean, why most domains have several, and why an unexpected change is a serious alert.