Skip to main content
← All Songs
Topic

Authentication

SPF, DKIM, DMARC, ARC, BIMI — the cryptographic protocols that prove your mail is actually from you and protect your domain from spoofing.

47 songs
Songs
DKIM2
DKIM2
Inbox Senders Club
Ali G(mail) is back on da mic to break down DKIM2 — the IETF draft rebuilding email authentication around a signed chain of custody, where every hop signs, every change is declared, and every bounce goes home. Five minutes of hip-hop spec exegesis straight from IETF DKIM2 Daft Specs.
SecurityBounce Management
Spam is a State of Mind
Spam is a State of Mind
Inbox Senders Club
A recipient answers back over punchy brass and a driving bassline: your SPF, your DKIM, your DMARC at reject and your lawyer's sign-off decide nothing, because the only person who gets to say whether a message is spam is the one who received it. A retro-soul belter about complaints, stale permission, and the difference between being compliant and being wanted — built on Al Iverson's "Always remember: Spam is a state of mind" at Spam Resource.
FBLPermission
Say Your Name
Say Your Name
Say My Name — Destiny's Child
Destiny's Child's "Say My Name" flipped one pronoun into "Say Your Name" — now it is the receiving server doing the interrogating, demanding a sender prove who it is when the DKIM signature just failed and DMARC is still parked at p=none. Late 90s R&B about authentication and spoofing.
SecurityInbox Placement
Plus que de l'email
Plus que de l'email
Plus que du métal — Mass Hysteria
A French nu-metal anthem in the style of Mass Hysteria that turns SMTP into a five-decade-old brotherhood — postmasters, email geeks, and honest senders united against spammers and cold mailers, chanting deliverability like a battle cry.
WarmupPostmaster Tools
Inbox Blues
New
Inbox Blues
Inbox Senders Club
A gritty 60s soul lament — Amy Winehouse-inspired brass, walking bass, and raw female vocals — about an email that never makes it through. Soft bounces, blacklists, and broken authentication told as heartbreak.
Bounce ManagementReputation
No Papers
New
No Papers
Inbox Senders Club
The Postmaster opens his rulebook with the first and most fundamental law: without SPF, DKIM, and DMARC, you're a ghost in his domain — unverifiable, denied at the gate, permanently locked out. No authentication, no entry.
SecuritySpam Filters
First Blast
New
First Blast
Inbox Senders Club
Marcus Deliverino fires his first campaign: ten thousand names, no authentication, no warm-up, and complete confidence. SPF, DKIM, and DMARC can wait. The only enemy is the Promotions tab.
WarmupBounce Management
Still SPF
Still SPF
Still D.R.E. — Dr. Dre
A parody of Dr. Dre's "Still D.R.E." told from SPF's own perspective — RFC 7208 still running MAIL FROM checks, still enforcing the 10-lookup limit, still breaking forwarded mail without SRS. SPF makes its case for continued relevance in an era of DMARC alignment and SaaS-exploded include chains.
Security
Domain Reputation
Domain Reputation
Californication — Red Hot Chili Peppers
A RHCP-inspired meditation on the invisible force that controls every sender's fate. Covers domain warmup, complaint thresholds, engagement signals, and why a single volume spike can destroy years of hard-won reputation.
ReputationInbox Placement
Bullet With Spammy Wings
Bullet With Spammy Wings
Bullet with Butterfly Wings — The Smashing Pumpkins
A grunge parody of The Smashing Pumpkins' "Bullet with Butterfly Wings" following a throttled sender's spiral into spam — blacklisted IPs, bad engagement, and the desperate hope that SPF and DMARC enforcement can claw back inbox placement.
Spam FiltersWarmup
I Get Blocked Down
I Get Blocked Down
Tubthumping — Chumbawamba
A Tubthumping parody built on the resilience every sender needs — getting blocked is inevitable, but SPF, DKIM, IP warmup, and relentless list purging are how you get back to the inbox and stay there. Covers the full sender rehabilitation playbook from authentication to list hygiene.
EngagementList Hygiene
Spam World
Spam World
Wild World — Cat Stevens / Yusuf
Sung to the melody of Cat Stevens' folk classic, "Spam World" pairs a veteran deliverability mentor's gentle warning with the hard truths facing every new sender — from missing authentication to IP blocklisting and the hidden danger of dead email addresses.
Spam FiltersList Hygiene
Inbox Senders Club
Inbox Senders Club
Inbox Senders Club
Follow best practices and you'll be fine!
ReputationWarmup
Outlook/Let my Email
Outlook/Let my Email
Aquarius / Let the Sunshine — The 5th Dimension
A cosmic, psychedelic anthem about the celestial chaos of sending into Microsoft's Outlook ecosystem, where bounces ascend, complaints never end, and authentication becomes a revelation. Covers SPF/DKIM/DMARC alignment, bounce management, sender reputation, and the eternal struggle for inbox placement at Hotmail and Outlook.
Bounce ManagementInbox Placement
Forgot About Consent
Forgot About Consent
Forgot about Dre — Dr. Dre
Because deliverability and infrastructure aren't the real issues for cold mailers—they’re just symptoms. The real problem is a lack of consent.
PermissionWarmup
DKIM
DKIM
Jolene — Dolly Parton
A heartfelt plea to DKIM set to Dolly's classic, this parody walks through how cryptographic signing with private keys and published public records proves your mail is authentic and untampered. It's a soulful ode to the authentication standard that locks down your messages so receivers can trust they're really from you.
Reputation
Deliverability Rhapsody
Deliverability Rhapsody
Bohemian Rhapsody — Queen
This song gave me a hard time revising it because of the changes in rhythm and style. I wasn't able to produce the dramatic/lyrical section the way I wanted. I'm quite satisfied with the final result though. What do you think?
Postmaster ToolsSecurity
Sender
Sender
Sober — Tool
A haunting first-person plea from a sender begging the filters for mercy, "Sender" captures the anxiety of fighting for inbox placement despite doing everything right. The song explores authentication, sender reputation, and the brutal reality that even fully authenticated, well-segmented mail can still land in Gmail's Promotions tab.
Inbox PlacementReputation
Spam Suey!
Spam Suey!
Chop Suey — System of a Down
A high-energy anthem about the four pillars of inbox placement — SPF authentication, IP warmup, list hygiene, and sender reputation — delivered from the perspective of a sender frustrated by landing in the Promotions tab. The song drives home that trust is earned through technical setup and clean lists, not self-righteous campaigns.
Spam FiltersWarmup
Unfortunate Sender
Unfortunate Sender
Fortunate Son Parody - Clutch Cover — Creedence Clearwater Revival
A defiant anthem from the perspective of a legitimate sender distancing themselves from the bad actors who tank deliverability for everyone else, calling out purchased lists, missing SPF/DKIM authentication, and the "send to everyone" mentality that ignores engagement data. Covers permission-based list building, email authentication fundamentals, and the segmentation discipline that Postmaster Tools will eventually reward — or punish you for ignoring.
PermissionEngagement
Do It Right (Deliverability)
Do It Right (Deliverability)
Shake a Tail Feather — Blues Brothers
A cautionary tale about the sender who bought a 100,000-lead list and learned the hard way why spam traps, blocklists, and tanked sender reputation can't be undone with a high open rate. The narrator delivers a step-by-step intervention covering list hygiene, IP warmup, and reputation monitoring — because doing it right beats starting over.
List HygienePermission
In the Inbox
In the Inbox
Flashdance... What a Feeling — Irene Cara
A triumphant comeback anthem tracing the journey from blocked IPs and trashed campaigns to inbox placement glory through domain warmup, blocklist remediation, and DMARC fixes. The narrator's victory lap doubles as a roadmap for any sender clawing their way back to engaged subscribers and recovered ROI.
ReputationInbox Placement
Clean It Off
Clean It Off
Shake It Off — Taylor Swift
A defiant anthem about list hygiene as the antidote to spam filters and hard bounces, set against a backdrop of proper authentication and domain warmup. The narrator shrugs off spammers and blocklists by doing the unglamorous work: scrubbing bounces, dodging spam traps, and keeping the sending reputation spotless.
List HygieneSpam Filters
P=REJECT (Without Me)
P=REJECT (Without Me)
Without Me — Eminem
A high-energy anthem for DMARC enforcement, this song champions the move from p=none monitoring to a full p=reject policy as the only real defense against domain spoofing and phishing. It breaks down why authentication alignment across SPF and DKIM — backed by a strict DMARC stance — is what actually stops fraudsters from impersonating your brand at the gateway.
SecuritySpam Filters
The Rep is on Fire
The Rep is on Fire
Fire Water Burn — Bloodhound Gang
A cautionary anthem from a reckless list-blaster watching his sender reputation go up in flames after buying leads and skipping warmup, this track torches every rule in the book to teach what really tanks domain reputation: bought lists, complaint spikes, and ignoring Postmaster Tools, FBL signals, and authentication. Equal parts confession and case study in how fast deliverability collapses when fundamentals are abandoned.
ReputationFBL
I'm Still Sending
I'm Still Sending
I'm Still Standing — Elton John
A defiant comeback anthem from a sender who hit the filters, fixed their SPF, DKIM, and DMARC, and rebuilt reputation through a disciplined IP warmup. The song captures the long road back from blocklist purgatory, proving that proper authentication and patient ramp-up beat any shortcut.
ReputationWarmup
Block It
Block It
Beat It — Michael Jackson
A defiant anthem voiced from the receiving mail server's perspective, "Block It" lays down the law on SPF, DKIM, and DMARC alignment — reminding senders that misaligned headers and bad authentication records are a one-way ticket to rejection.
Spam FiltersSecurity
Bin It
Bin It
Beat It — Michael Jackson
A high-energy anthem warning senders what happens when blocklists, bounces, and DMARC failures send their campaigns straight to the trash. "Bin It" hammers home the fundamentals of authentication, reputation management, and IP warmup with a chorus you won't be able to delete from your head.
ReputationBounce Management
EHLO
EHLO
Hello — Adele
A heartbroken SMTP client serenades an unresponsive mail server in this Adele-flavored ballad about EHLO greetings, 4xx temporary deferrals, and TLS negotiation gone wrong. Equal parts protocol primer and breakup anthem, it teaches the mechanics of SMTP handshakes and bounce code interpretation through the universal language of being left on read.
Bounce ManagementSecurity
Sending in the Name
Sending in the Name
Killing in the Name — Rage Against The Machine
A blistering protest anthem against domain spoofers and email scrapers who hijack legitimate brands to flood inboxes with abuse. The song channels righteous fury into a lesson on why SPF, DKIM, and DMARC enforcement exist — to stop bad actors from sending in the name of someone else.
SecurityPermission
D.K.I.M.
D.K.I.M.
Y.M.C.A. — Village People
A disco-era anthem that reframes a classic singalong as a primer on DKIM, explaining how cryptographic signatures let receivers verify a message hasn't been altered in transit. The narrator coaches a struggling sender through authentication basics, making the case that signed mail — not just vibes — is what builds inbox trust on a new domain.
Reputation
Anarchy in the Inbox
Anarchy in the Inbox
Anarchy in the UK — Sex Pistols
*ABOUT THIS SONG* This is a humorous parody of the song "Anarchy in the UK" This work is intended as a parody for comedic purposes, created in the spirit of the "right to parody" (exception de parodie) recognized in France under Article L. 122-5 of the Intellectual Property Cod
SecuritySpam Filters
Bounce Away
Bounce Away
Fly Away — Lenny Kravitz
A wistful anthem from a sender drowning in 5xx rejects and broken DKIM signatures, longing for the day their mail flows clean through every MX. "Bounce Away" turns SMTP error codes, SPF alignment, and authentication failures into a singalong lesson on why bounce management and proper auth aren't optional.
Bounce Management
Every Mail You Make
Every Mail You Make
Every Breath You Take — The Police
A haunting cautionary tale told from the perspective of the spam filter itself, watching every authentication failure, scraped list, and faked header that erodes sender reputation. The song delivers a chilling lesson on why DMARC enforcement, list hygiene, and honest sending practices are the only path back from the blocklist.
Spam FiltersPermission
In Da Box
In Da Box
In Da Club — 50 Cent
A swaggering anthem from a sender who's done the work — passing SPF, building IP reputation, and earning a one-way ticket to the inbox. "In Da Box" turns authentication and reputation fundamentals into a victory lap, showing how clean sends and proper auth records translate directly into placement wins.
ReputationInbox Placement
Inbox Clean Spirit
Inbox Clean Spirit
Smells Like Teen Spirit — Nirvana
A grunge-flavored anthem sung from the perspective of a mailbox provider's spam filter, sizing up incoming senders by their authentication, domain reputation, and header signals. The song teaches that failed SPF/DKIM/DMARC checks and shady display names trip the guard at EHLO — long before your subject line ever gets a chance.
ReputationSpam Filters
Losin' My Reputation
Losin' My Reputation
Losin' My Religion — R.E.M.
“Losin’ My Reputation” reimagines R.E.M.’s hit through the lens of email deliverability: reputation drops, misconfigurations, and the eternal battle with spam folders.
ReputationSpam Filters
Still in the Inbox
Still in the Inbox
Inbox Senders Club
A weary, wise-eyed blues meditation from a sender who's outlasted the noise by trusting the slow work: aligned authentication (SPF, DKIM, DMARC), ruthless list hygiene, and engagement-only sending. It's the quiet gospel of earned reputation — no spikes, no shortcuts, just steady signals and the ones who lean in each week.
Inbox PlacementReputation
DMARC Don't Lie
DMARC Don't Lie
Inbox Senders Club
A weary sender's blues confession that reads SPF, DKIM, and DMARC alignment like a lover's lie detector — exposing misaligned From domains, p=none policies hiding from enforcement, and duplicate DMARC records left to rot in the zone. Soulful and grounded, it argues that authentication tells the truth your headers won't.
Security
DKIM on My Mind
DKIM on My Mind
Inbox Senders Club
A weary sender's blues meditation on DKIM authentication — the loneliness of unsigned headers, the heartbreak of broken signatures, and the hard-won wisdom of key rotation, selector hygiene, and domain alignment across multiple vendors. Sung from the perspective of someone who's watched messages fail trust checks one too many times and learned that without a valid signature, nothing else matters.
Inbox Placement
Born Under A Bad IP
Born Under A Bad IP
Inbox Senders Club
A weary midnight blues from a sender who's read too many headers, "Born Under A Bad IP" lays down hard truths about SPF — alignment between envelope-from and the published record, the 10-lookup limit that quietly breaks authentication, and why the protocol can't promise the inbox but absolutely controls whether you make it past the door.
Inbox Placement
BIMI Crown
BIMI Crown
Inbox Senders Club
Ali G(mail) flexes his hard-earned BIMI crown in this swaggering anthem about how brand logos in the inbox are the visible reward for nailing DMARC alignment and authentication. Equal parts royal coronation and hip-hop boast, it turns Brand Indicators for Message Identification into the ultimate sender flex — booyakasha.
Reputation
DMARC The Firewall Within
DMARC The Firewall Within
Inbox Senders Club
Ali G(mail) suits up as a streetwise authentication enforcer in this defiant anthem about DMARC, breaking down how SPF alignment, DKIM signatures, and rua reports work together to expose spoofers wearing his domain like a stolen mask. Booyakasha — it's identifier alignment with a hip-hop swagger.
Security
DMARC Or Die Tryin'
DMARC Or Die Tryin'
Inbox Senders Club
Ali G(mail) goes full enforcement mode in this hard-hitting anthem about DMARC policies, identifier alignment, and aggregate reporting — slapping spoofers harder than his Nan's angry face. A street-certified masterclass in p=reject swagger, where authentication ain't a suggestion, fam, it's a lifestyle.
Security
DKIM On My Chain
DKIM On My Chain
Inbox Senders Club
Ali G(mail) flexes his cryptographic drip in this gold-chain anthem to DKIM, breaking down signatures, selectors, and header alignment with the swagger of a verified sender flossin' on spoofers. It's a hip-hop masterclass in why a properly signed email hits inboxes harder than a bassline, innit.
Security
SPF (Sendin' Pure Fire)
SPF (Sendin' Pure Fire)
Inbox Senders Club
Ali G(mail) drops a cheeky hip-hop banger about SPF (Sender Policy Framework), schooling sender mans on authorized IPs, clean syntax, and why softfails and dodgy spoofers get slapped from the command. Booyakasha — it's authentication 101 with a mixtape swagger.
Security
Straight To Da Top
Straight To Da Top
Inbox Senders Club
Ali G(mail) bursts onto the deliverability scene convinced he's personally cracked the Gmail algorithm because, innit, his name is literally in it, bruv. A hip-hop parody romp through SPF, DKIM, subject lines, and inbox placement — explained by a man who thinks "open rates" are something you negotiate down the market.
Inbox PlacementEngagement
Glossary
SPF — Sender Policy Framework
DNS-based mechanism (RFC 7208) that authorizes which IP addresses may send email on behalf of a domain via a TXT record. Evaluated at SMTP connection time against the envelope MAIL FROM domain, not the visible From header.
DKIM — DomainKeys Identified Mail
Cryptographic signature (RFC 6376) added to email headers by the sending MTA and verified using a public key published in DNS. Survives email forwarding unlike SPF.
DMARC — Domain-based Message Authentication, Reporting & Conformance
Policy layer (RFC 7489) built on SPF and DKIM. Allows domain owners to declare how receivers handle authentication failures. Requires identifier alignment between authenticated domain and visible From header.
ARC — Authenticated Received Chain
Protocol (RFC 8617) that preserves authentication results across email forwarding hops by cryptographically signing the original results at each forwarding step.
BIMI — Brand Indicators for Message Identification
Standard that displays a brand logo next to authenticated messages in supporting mailbox providers. Requires DMARC at p=quarantine or p=reject plus a Verified Mark Certificate (VMC).
MTA-STS — Mail Transfer Agent Strict Transport Security
Policy mechanism (RFC 8461) allowing domains to declare TLS support for inbound SMTP, requiring sending MTAs to refuse unencrypted delivery.
DMARC Alignment
The DMARC requirement that the domain authenticated by SPF or DKIM matches the visible RFC 5322 From header domain. Can be strict (exact match) or relaxed (organizational domain match).
Identifier Alignment
The requirement that the From header domain aligns with the domain authenticated via SPF or DKIM. Synonym for DMARC Alignment.
Envelope Sender (MAIL FROM)
The domain used in the SMTP MAIL FROM command, also called Return-Path or bounce address. The domain SPF evaluates — not the visible From header. When empty, SPF falls back to the HELO/EHLO hostname.
HELO / EHLO
The hostname an MTA announces at the start of an SMTP session. When MAIL FROM is empty (bounce messages, DSNs), SPF evaluates against the HELO/EHLO hostname per RFC 7208.
SPF Flattening
Resolving all nested include: mechanisms in an SPF record to constituent IP ranges (ip4:/ip6:) to eliminate DNS lookup recursion and stay within the 10-lookup limit.
Void Lookup
An SPF DNS query that resolves successfully but returns no usable records. RFC 7208 limits void lookups to 2; exceeding this triggers permerror.
permerror / softfail / fail
SPF result codes: fail (-all) means the sending IP is explicitly unauthorized; softfail (~all) requests lenient handling; permerror means evaluation failed due to exceeded lookup limits or DNS errors — DMARC treats it identically to fail.
rua — Aggregate Reports
The DMARC rua= tag specifies where receivers send daily XML aggregate reports summarizing all messages claiming the domain, broken down by source IP, authentication result, and disposition.
ruf — Forensic Reports
The DMARC ruf= tag specifies where receivers send copies of individual failing messages or redacted headers in near real-time for granular debugging.
DMARC Policy
The p= tag in a DMARC record: none (monitor only), quarantine (route failing messages to spam), or reject (block failing messages at the SMTP layer).
SRS — Sender Rewriting Scheme
Rewrites the MAIL FROM envelope when forwarding email so SPF can still pass at the final destination. ARC is the preferred modern alternative.
Other Topics
WarmupBounce ManagementList HygieneInbox PlacementSpam FiltersFBLReputationPostmaster ToolsEngagementPermissionComplianceEmail DesignSecuritySegmentation