email-toolbox-wiki/parked-domain-how-to.md
2019-09-23 15:13:09 +02:00

27 lines
1.0 KiB
Markdown
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# Introduction
This how-to is created by the Dutch Internet Standards Platform (the organization behind [internet.nl](https://internet.nl)) and is meant to provide practical information and guidance on explicitly configuring a parked domain not to use e-mail.
# Null MX
Explicitly configure an 'empty' MX record according to [RFC7505 ](https://tools.ietf.org/html/rfc7505).
`example.nl IN MX 0 .`
# DMARC
`_dmarc IN TXT "v=DMARC1; p=reject; rua=mailto:rua@example.nl; ruf=mailto:ruf@example.nl`
# DKIM
`selector._domainkey IN TXT "v=DKIM1; p="`
# SPF
`example.nl IN TXT "v=spf1 all"`
# Other tips and tricks
* Don't use an A or AAAA record for parked domains.
* Don't redirect from a parked domain to the used domain, since this encourages users to keep using the parked domain name.
* If a redirect is used, make sure to use the proper redirect order in order for HSTS headers to remain effective:
1. redirect from HTTP to HTTPS on the same (sub)domain.
2. when using HTTPS, redirect to another (sub)domain.