Skip to main content
← All Songs
Topic

Authentication

SPF, DKIM, DMARC, ARC, BIMI — the cryptographic protocols that prove your mail is actually from you and protect your domain from spoofing.

41 songs
Songs
First Blast
New
First Blast
Inbox Senders Club
Marcus Deliverino fires his first campaign: ten thousand names, no authentication, no warm-up, and complete confidence. SPF, DKIM, and DMARC can wait. The only enemy is the Promotions tab.
WarmupInbox Placement
Still SPF
Still SPF
Still D.R.E. — Dr. Dre
A parody of Dr. Dre's "Still D.R.E." told from SPF's own perspective — RFC 7208 still running MAIL FROM checks, still enforcing the 10-lookup limit, still breaking forwarded mail without SRS. SPF makes its case for continued relevance in an era of DMARC alignment and SaaS-exploded include chains.
SPFDMARC
Bullet With Spammy Wings
Bullet With Spammy Wings
Bullet with Butterfly Wings — The Smashing Pumpkins
A grunge parody of The Smashing Pumpkins' "Bullet with Butterfly Wings" following a throttled sender's spiral into spam — blacklisted IPs, bad engagement, and the desperate hope that SPF and DMARC enforcement can claw back inbox placement.
ReputationSpam Filters
Doing Something Unholy
Doing Something Unholy
Unholy — Sam Smith & Kim Petras
A parody of Sam Smith and Kim Petras's chart-topping "Unholy," following a sender whose purchased lists, missing DMARC and DKIM, and consent violations earn him a Spamhaus block and a dying inbox. A pop-infused lesson in reputation damage, list hygiene, and the price of doing something truly unholy to your deliverability.
ReputationList Hygiene
I Get Blocked Down
I Get Blocked Down
Tubthumping — Chumbawamba
A Tubthumping parody built on the resilience every sender needs — getting blocked is inevitable, but SPF, DKIM, IP warmup, and relentless list purging are how you get back to the inbox and stay there. Covers the full sender rehabilitation playbook from authentication to list hygiene.
WarmupBounce Management
Spam World
Spam World
Wild World — Cat Stevens / Yusuf
Sung to the melody of Cat Stevens' folk classic, "Spam World" pairs a veteran deliverability mentor's gentle warning with the hard truths facing every new sender — from missing authentication to IP blocklisting and the hidden danger of dead email addresses.
WarmupReputation
Phish
Phish
Kiss — Prince and the Revolution
A humorous parody of Prince's classic exploring the deceptive world of phishing. This track highlights how easily unsuspecting users can be tricked into handing over their passwords.
SecurityEmail Design
Outlook/Let my Email
Outlook/Let my Email
Aquarius / Let the Sunshine — The 5th Dimension
A cosmic, psychedelic anthem about the celestial chaos of sending into Microsoft's Outlook ecosystem, where bounces ascend, complaints never end, and authentication becomes a revelation. Covers SPF/DKIM/DMARC alignment, bounce management, sender reputation, and the eternal struggle for inbox placement at Hotmail and Outlook.
Bounce ManagementReputation
Forgot About Consent
Forgot About Consent
Forgot about Dre — Dr. Dre
Because deliverability and infrastructure aren't the real issues for cold mailers—they’re just symptoms. The real problem is a lack of consent.
PermissionReputation
DKIM
DKIM
Jolene — Dolly Parton
A heartfelt plea to DKIM set to Dolly's classic, this parody walks through how cryptographic signing with private keys and published public records proves your mail is authentic and untampered. It's a soulful ode to the authentication standard that locks down your messages so receivers can trust they're really from you.
Deliverability Rhapsody
Deliverability Rhapsody
Bohemian Rhapsody — Queen
This song gave me a hard time revising it because of the changes in rhythm and style. I wasn't able to produce the dramatic/lyrical section the way I wanted. I'm quite satisfied with the final result though. What do you think?
Postmaster ToolsSecurity
Sender
Sender
Sober — Tool
A haunting first-person plea from a sender begging the filters for mercy, "Sender" captures the anxiety of fighting for inbox placement despite doing everything right. The song explores authentication, sender reputation, and the brutal reality that even fully authenticated, well-segmented mail can still land in Gmail's Promotions tab.
Inbox PlacementReputation
Spam Suey!
Spam Suey!
Chop Suey — System of a Down
A high-energy anthem about the four pillars of inbox placement — SPF authentication, IP warmup, list hygiene, and sender reputation — delivered from the perspective of a sender frustrated by landing in the Promotions tab. The song drives home that trust is earned through technical setup and clean lists, not self-righteous campaigns.
WarmupReputation
Unfortunate Sender
Unfortunate Sender
Fortunate Son Parody - Clutch Cover — Creedence Clearwater Revival
A defiant anthem from the perspective of a legitimate sender distancing themselves from the bad actors who tank deliverability for everyone else, calling out purchased lists, missing SPF/DKIM authentication, and the "send to everyone" mentality that ignores engagement data. Covers permission-based list building, email authentication fundamentals, and the segmentation discipline that Postmaster Tools will eventually reward — or punish you for ignoring.
List HygienePostmaster Tools
In the Inbox
In the Inbox
Flashdance... What a Feeling — Irene Cara
A triumphant comeback anthem tracing the journey from blocked IPs and trashed campaigns to inbox placement glory through domain warmup, blocklist remediation, and DMARC fixes. The narrator's victory lap doubles as a roadmap for any sender clawing their way back to engaged subscribers and recovered ROI.
ReputationInbox Placement
Clean It Off
Clean It Off
Shake It Off — Taylor Swift
A defiant anthem about list hygiene as the antidote to spam filters and hard bounces, set against a backdrop of proper authentication and domain warmup. The narrator shrugs off spammers and blocklists by doing the unglamorous work: scrubbing bounces, dodging spam traps, and keeping the sending reputation spotless.
WarmupList Hygiene
P=REJECT (Without Me)
P=REJECT (Without Me)
Without Me — Eminem
A high-energy anthem for DMARC enforcement, this song champions the move from p=none monitoring to a full p=reject policy as the only real defense against domain spoofing and phishing. It breaks down why authentication alignment across SPF and DKIM — backed by a strict DMARC stance — is what actually stops fraudsters from impersonating your brand at the gateway.
SecurityReputation
Wrecking Ball
Wrecking Ball
Wrecking Ball — Miley Cyrus
Told from the perspective of a wary mailbox provider, this Miley Cyrus parody warns what happens when a brand-new sending domain skips warmup and blasts full volume from day one — soaring bounce rates, complaint spikes, and shattered reputation. A vivid lesson in why gradual ramp-up, established sending history, and transparent authentication are non-negotiable for inbox placement.
WarmupReputation
The Rep is on Fire
The Rep is on Fire
Fire Water Burn — Bloodhound Gang
A cautionary anthem from a reckless list-blaster watching his sender reputation go up in flames after buying leads and skipping warmup, this track torches every rule in the book to teach what really tanks domain reputation: bought lists, complaint spikes, and ignoring Postmaster Tools, FBL signals, and authentication. Equal parts confession and case study in how fast deliverability collapses when fundamentals are abandoned.
ReputationFBL
I'm Still Sending
I'm Still Sending
I'm Still Standing — Elton John
A defiant comeback anthem from a sender who hit the filters, fixed their SPF, DKIM, and DMARC, and rebuilt reputation through a disciplined IP warmup. The song captures the long road back from blocklist purgatory, proving that proper authentication and patient ramp-up beat any shortcut.
ReputationWarmup
Block It
Block It
Beat It — Michael Jackson
A defiant anthem voiced from the receiving mail server's perspective, "Block It" lays down the law on SPF, DKIM, and DMARC alignment — reminding senders that misaligned headers and bad authentication records are a one-way ticket to rejection.
ReputationSpam Filters
Bin It
Bin It
Beat It — Michael Jackson
A high-energy anthem warning senders what happens when blocklists, bounces, and DMARC failures send their campaigns straight to the trash. "Bin It" hammers home the fundamentals of authentication, reputation management, and IP warmup with a chorus you won't be able to delete from your head.
ReputationBounce Management
EHLO
EHLO
Hello — Adele
A heartbroken SMTP client serenades an unresponsive mail server in this Adele-flavored ballad about EHLO greetings, 4xx temporary deferrals, and TLS negotiation gone wrong. Equal parts protocol primer and breakup anthem, it teaches the mechanics of SMTP handshakes and bounce code interpretation through the universal language of being left on read.
Bounce Management
Sending in the Name
Sending in the Name
Killing in the Name — Rage Against The Machine
A blistering protest anthem against domain spoofers and email scrapers who hijack legitimate brands to flood inboxes with abuse. The song channels righteous fury into a lesson on why SPF, DKIM, and DMARC enforcement exist — to stop bad actors from sending in the name of someone else.
Security
D.K.I.M.
D.K.I.M.
Y.M.C.A. — Village People
A disco-era anthem that reframes a classic singalong as a primer on DKIM, explaining how cryptographic signatures let receivers verify a message hasn't been altered in transit. The narrator coaches a struggling sender through authentication basics, making the case that signed mail — not just vibes — is what builds inbox trust on a new domain.
Can't Block Us
Can't Block Us
Can't Hold Us — Macklemore & Ryan Lewis
A high-energy anthem celebrating the fundamentals that keep senders out of the spam folder, walking through authentication alignment, IP and domain warmup, and disciplined bounce management. The narrator frames Postmaster Tools and a clean list as the building blocks of an unblockable sending program.
Bounce ManagementList Hygiene
Bounce Away
Bounce Away
Fly Away — Lenny Kravitz
A wistful anthem from a sender drowning in 5xx rejects and broken DKIM signatures, longing for the day their mail flows clean through every MX. "Bounce Away" turns SMTP error codes, SPF alignment, and authentication failures into a singalong lesson on why bounce management and proper auth aren't optional.
Bounce Management
Every Mail You Make
Every Mail You Make
Every Breath You Take — The Police
A haunting cautionary tale told from the perspective of the spam filter itself, watching every authentication failure, scraped list, and faked header that erodes sender reputation. The song delivers a chilling lesson on why DMARC enforcement, list hygiene, and honest sending practices are the only path back from the blocklist.
Spam FiltersList Hygiene
In Da Box
In Da Box
In Da Club — 50 Cent
A swaggering anthem from a sender who's done the work — passing SPF, building IP reputation, and earning a one-way ticket to the inbox. "In Da Box" turns authentication and reputation fundamentals into a victory lap, showing how clean sends and proper auth records translate directly into placement wins.
ReputationInbox Placement
Inbox Clean Spirit
Inbox Clean Spirit
Smells Like Teen Spirit — Nirvana
A grunge-flavored anthem sung from the perspective of a mailbox provider's spam filter, sizing up incoming senders by their authentication, domain reputation, and header signals. The song teaches that failed SPF/DKIM/DMARC checks and shady display names trip the guard at EHLO — long before your subject line ever gets a chance.
ReputationSpam Filters
Losin' My Reputation
Losin' My Reputation
Losin' My Religion — R.E.M.
“Losin’ My Reputation” reimagines R.E.M.’s hit through the lens of email deliverability: reputation drops, misconfigurations, and the eternal battle with spam folders.
ReputationSpam Filters
Still in the Inbox
Still in the Inbox
Inbox Senders Club
A weary, wise-eyed blues meditation from a sender who's outlasted the noise by trusting the slow work: aligned authentication (SPF, DKIM, DMARC), ruthless list hygiene, and engagement-only sending. It's the quiet gospel of earned reputation — no spikes, no shortcuts, just steady signals and the ones who lean in each week.
ReputationEngagement
DMARC Don't Lie
DMARC Don't Lie
Inbox Senders Club
A weary sender's blues confession that reads SPF, DKIM, and DMARC alignment like a lover's lie detector — exposing misaligned From domains, p=none policies hiding from enforcement, and duplicate DMARC records left to rot in the zone. Soulful and grounded, it argues that authentication tells the truth your headers won't.
SecurityCompliance
DKIM on My Mind
DKIM on My Mind
Inbox Senders Club
A weary sender's blues meditation on DKIM authentication — the loneliness of unsigned headers, the heartbreak of broken signatures, and the hard-won wisdom of key rotation, selector hygiene, and domain alignment across multiple vendors. Sung from the perspective of someone who's watched messages fail trust checks one too many times and learned that without a valid signature, nothing else matters.
Security
Born Under A Bad IP
Born Under A Bad IP
Inbox Senders Club
A weary midnight blues from a sender who's read too many headers, "Born Under A Bad IP" lays down hard truths about SPF — alignment between envelope-from and the published record, the 10-lookup limit that quietly breaks authentication, and why the protocol can't promise the inbox but absolutely controls whether you make it past the door.
Inbox on the Line
Inbox on the Line
Inbox Senders Club
A weary sender's blues meditation on how inbox placement is earned slowly and lost easily, weaving together domain reputation, patient IP warmup, engagement signals, and authentication as the quiet disciplines ISPs actually measure. The narrator speaks with the grounded wisdom of someone who has watched too many brands mistake a clean SPF record for a clean conscience.
ReputationWarmup
BIMI Crown
BIMI Crown
Inbox Senders Club
Ali G(mail) flexes his hard-earned BIMI crown in this swaggering anthem about how brand logos in the inbox are the visible reward for nailing DMARC alignment and authentication. Equal parts royal coronation and hip-hop boast, it turns Brand Indicators for Message Identification into the ultimate sender flex — booyakasha.
DMARC The Firewall Within
DMARC The Firewall Within
Inbox Senders Club
Ali G(mail) suits up as a streetwise authentication enforcer in this defiant anthem about DMARC, breaking down how SPF alignment, DKIM signatures, and rua reports work together to expose spoofers wearing his domain like a stolen mask. Booyakasha — it's identifier alignment with a hip-hop swagger.
DMARC Or Die Tryin'
DMARC Or Die Tryin'
Inbox Senders Club
Ali G(mail) goes full enforcement mode in this hard-hitting anthem about DMARC policies, identifier alignment, and aggregate reporting — slapping spoofers harder than his Nan's angry face. A street-certified masterclass in p=reject swagger, where authentication ain't a suggestion, fam, it's a lifestyle.
SPF (Sendin' Pure Fire)
SPF (Sendin' Pure Fire)
Inbox Senders Club
Ali G(mail) drops a cheeky hip-hop banger about SPF (Sender Policy Framework), schooling sender mans on authorized IPs, clean syntax, and why softfails and dodgy spoofers get slapped from the command. Booyakasha — it's authentication 101 with a mixtape swagger.
Spam Filter Nemesis
Spam Filter Nemesis
Inbox Senders Club
Ali G(mail) drops sick beats to battle the ultimate algorithmic oppressor: the spam filter. A hilarious hip-hop anthem about the daily struggles of content filtering and sender reputation.
ReputationEngagement
Glossary
SPF — Sender Policy Framework
DNS-based mechanism (RFC 7208) that authorizes which IP addresses may send email on behalf of a domain via a TXT record. Evaluated at SMTP connection time against the envelope MAIL FROM domain, not the visible From header.
DKIM — DomainKeys Identified Mail
Cryptographic signature (RFC 6376) added to email headers by the sending MTA and verified using a public key published in DNS. Survives email forwarding unlike SPF.
DMARC — Domain-based Message Authentication, Reporting & Conformance
Policy layer (RFC 7489) built on SPF and DKIM. Allows domain owners to declare how receivers handle authentication failures. Requires identifier alignment between authenticated domain and visible From header.
ARC — Authenticated Received Chain
Protocol (RFC 8617) that preserves authentication results across email forwarding hops by cryptographically signing the original results at each forwarding step.
BIMI — Brand Indicators for Message Identification
Standard that displays a brand logo next to authenticated messages in supporting mailbox providers. Requires DMARC at p=quarantine or p=reject plus a Verified Mark Certificate (VMC).
MTA-STS — Mail Transfer Agent Strict Transport Security
Policy mechanism (RFC 8461) allowing domains to declare TLS support for inbound SMTP, requiring sending MTAs to refuse unencrypted delivery.
DMARC Alignment
The DMARC requirement that the domain authenticated by SPF or DKIM matches the visible RFC 5322 From header domain. Can be strict (exact match) or relaxed (organizational domain match).
Identifier Alignment
The requirement that the From header domain aligns with the domain authenticated via SPF or DKIM. Synonym for DMARC Alignment.
Envelope Sender (MAIL FROM)
The domain used in the SMTP MAIL FROM command, also called Return-Path or bounce address. The domain SPF evaluates — not the visible From header. When empty, SPF falls back to the HELO/EHLO hostname.
HELO / EHLO
The hostname an MTA announces at the start of an SMTP session. When MAIL FROM is empty (bounce messages, DSNs), SPF evaluates against the HELO/EHLO hostname per RFC 7208.
SPF Flattening
Resolving all nested include: mechanisms in an SPF record to constituent IP ranges (ip4:/ip6:) to eliminate DNS lookup recursion and stay within the 10-lookup limit.
Void Lookup
An SPF DNS query that resolves successfully but returns no usable records. RFC 7208 limits void lookups to 2; exceeding this triggers permerror.
permerror / softfail / fail
SPF result codes: fail (-all) means the sending IP is explicitly unauthorized; softfail (~all) requests lenient handling; permerror means evaluation failed due to exceeded lookup limits or DNS errors — DMARC treats it identically to fail.
rua — Aggregate Reports
The DMARC rua= tag specifies where receivers send daily XML aggregate reports summarizing all messages claiming the domain, broken down by source IP, authentication result, and disposition.
ruf — Forensic Reports
The DMARC ruf= tag specifies where receivers send copies of individual failing messages or redacted headers in near real-time for granular debugging.
DMARC Policy
The p= tag in a DMARC record: none (monitor only), quarantine (route failing messages to spam), or reject (block failing messages at the SMTP layer).
SRS — Sender Rewriting Scheme
Rewrites the MAIL FROM envelope when forwarding email so SPF can still pass at the final destination. ARC is the preferred modern alternative.
Other Topics
WarmupBounce ManagementList HygieneInbox PlacementSpam FiltersFBLReputationPostmaster ToolsEngagementPermissionComplianceEmail DesignSecurity