18F / dns

DNS configuration for domains managed by GSA TTS
https://github.com/18F/dns/blob/master/doc/architecture.md
Other
45 stars 60 forks source link

Enable SPF validation for Touchpoints emails #706

Closed sanason closed 2 months ago

sanason commented 2 months ago

Improve Touchpoints email deliverability by enabling SPF validation (DKIM validation is already enabled). Touchpoints uses AWS SES.

Changes enacted by this PR:

  1. Verify 'touchpoints.digital.gov' as an SES identity by adding DKIM records for the domain.
  2. Add subdomain 'mail.touchpoints.digital.gov' as our custom mail from domain by adding an MX record for it.
  3. Add an SPF record for 'mail.touchpoints.digital.gov'.
sanason commented 2 months ago

@ryanwoldatwork FYI

sanason commented 2 months ago

@18F/tts-tech-operations Could I request a review?

ryanwoldatwork commented 2 months ago

i'd consider leaving the old dns entries in, if a rollback is needed. and then deleting them in a follow-up PR.

but otherwise 👍