Skip to main content
← All Songs
Topic

Security

Authentication protocols and DNS policies that protect your domain from spoofing, phishing, and brand impersonation by bad actors.

20 songs
Songs
DKIM2
DKIM2
Inbox Senders Club
Ali G(mail) is back on da mic to break down DKIM2 — the IETF draft rebuilding email authentication around a signed chain of custody, where every hop signs, every change is declared, and every bounce goes home. Five minutes of hip-hop spec exegesis straight from IETF DKIM2 Daft Specs.
AuthenticationBounce Management
Say Your Name
Say Your Name
Say My Name — Destiny's Child
Destiny's Child's "Say My Name" flipped one pronoun into "Say Your Name" — now it is the receiving server doing the interrogating, demanding a sender prove who it is when the DKIM signature just failed and DMARC is still parked at p=none. Late 90s R&B about authentication and spoofing.
AuthenticationInbox Placement
Spamhaus
Spamhaus
Ghostbusters — Ray Parker Jr.
A weary, mournful blues take on "Ghostbusters" that swaps ghosts for botnets — a narrator who can't sleep for the junk in the queue, hollering for the one blocklist operator that knows every shady IP by name.
Spam FiltersReputation
Your Counterfeit Face
New
Your Counterfeit Face
Inbox Senders Club
You sent mail as a domain you don't own. You wore someone else's identity like a coat. In the inbox, that's phishing — and The Postmaster doesn't forget a face.
No Papers
New
No Papers
Inbox Senders Club
The Postmaster opens his rulebook with the first and most fundamental law: without SPF, DKIM, and DMARC, you're a ghost in his domain — unverifiable, denied at the gate, permanently locked out. No authentication, no entry.
AuthenticationSpam Filters
Still SPF
Still SPF
Still D.R.E. — Dr. Dre
A parody of Dr. Dre's "Still D.R.E." told from SPF's own perspective — RFC 7208 still running MAIL FROM checks, still enforcing the 10-lookup limit, still breaking forwarded mail without SRS. SPF makes its case for continued relevance in an era of DMARC alignment and SaaS-exploded include chains.
Authentication
Phish
Phish
Kiss — Prince and the Revolution
A humorous parody of Prince's classic exploring the deceptive world of phishing. This track highlights how easily unsuspecting users can be tricked into handing over their passwords.
Deliverability Rhapsody
Deliverability Rhapsody
Bohemian Rhapsody — Queen
This song gave me a hard time revising it because of the changes in rhythm and style. I wasn't able to produce the dramatic/lyrical section the way I wanted. I'm quite satisfied with the final result though. What do you think?
AuthenticationPostmaster Tools
Block Stuff
Block Stuff
Break Stuff — Limp Bizkit
A spam filter's frustrated rant from the front lines, "Block Stuff" channels the rage of catching spoofed senders, free-gift scams, and complaint-triggering junk all day long. The song breaks down how authentication failures, user complaints, and shady content fast-track senders straight onto blocklists.
Spam FiltersFBL
P=REJECT (Without Me)
P=REJECT (Without Me)
Without Me — Eminem
A high-energy anthem for DMARC enforcement, this song champions the move from p=none monitoring to a full p=reject policy as the only real defense against domain spoofing and phishing. It breaks down why authentication alignment across SPF and DKIM — backed by a strict DMARC stance — is what actually stops fraudsters from impersonating your brand at the gateway.
AuthenticationSpam Filters
Block It
Block It
Beat It — Michael Jackson
A defiant anthem voiced from the receiving mail server's perspective, "Block It" lays down the law on SPF, DKIM, and DMARC alignment — reminding senders that misaligned headers and bad authentication records are a one-way ticket to rejection.
Spam FiltersAuthentication
EHLO
EHLO
Hello — Adele
A heartbroken SMTP client serenades an unresponsive mail server in this Adele-flavored ballad about EHLO greetings, 4xx temporary deferrals, and TLS negotiation gone wrong. Equal parts protocol primer and breakup anthem, it teaches the mechanics of SMTP handshakes and bounce code interpretation through the universal language of being left on read.
Bounce ManagementAuthentication
Sending in the Name
Sending in the Name
Killing in the Name — Rage Against The Machine
A blistering protest anthem against domain spoofers and email scrapers who hijack legitimate brands to flood inboxes with abuse. The song channels righteous fury into a lesson on why SPF, DKIM, and DMARC enforcement exist — to stop bad actors from sending in the name of someone else.
AuthenticationPermission
Toxic
Toxic
Toxic — Britney Spears
When your sending reputation tanks and spam filters start treating every message like a hazmat situation, even the cleanest subject line can't save you from the junk folder. This parody captures the moment filters lock onto suspicious headers, sketchy links, and bloated HTML, dragging your inbox placement straight to zero.
Spam FiltersEmail Design
Anarchy in the Inbox
Anarchy in the Inbox
Anarchy in the UK — Sex Pistols
*ABOUT THIS SONG* This is a humorous parody of the song "Anarchy in the UK" This work is intended as a parody for comedic purposes, created in the spirit of the "right to parody" (exception de parodie) recognized in France under Article L. 122-5 of the Intellectual Property Cod
AuthenticationSpam Filters
DMARC Don't Lie
DMARC Don't Lie
Inbox Senders Club
A weary sender's blues confession that reads SPF, DKIM, and DMARC alignment like a lover's lie detector — exposing misaligned From domains, p=none policies hiding from enforcement, and duplicate DMARC records left to rot in the zone. Soulful and grounded, it argues that authentication tells the truth your headers won't.
Authentication
DMARC The Firewall Within
DMARC The Firewall Within
Inbox Senders Club
Ali G(mail) suits up as a streetwise authentication enforcer in this defiant anthem about DMARC, breaking down how SPF alignment, DKIM signatures, and rua reports work together to expose spoofers wearing his domain like a stolen mask. Booyakasha — it's identifier alignment with a hip-hop swagger.
Authentication
DMARC Or Die Tryin'
DMARC Or Die Tryin'
Inbox Senders Club
Ali G(mail) goes full enforcement mode in this hard-hitting anthem about DMARC policies, identifier alignment, and aggregate reporting — slapping spoofers harder than his Nan's angry face. A street-certified masterclass in p=reject swagger, where authentication ain't a suggestion, fam, it's a lifestyle.
Authentication
DKIM On My Chain
DKIM On My Chain
Inbox Senders Club
Ali G(mail) flexes his cryptographic drip in this gold-chain anthem to DKIM, breaking down signatures, selectors, and header alignment with the swagger of a verified sender flossin' on spoofers. It's a hip-hop masterclass in why a properly signed email hits inboxes harder than a bassline, innit.
Authentication
SPF (Sendin' Pure Fire)
SPF (Sendin' Pure Fire)
Inbox Senders Club
Ali G(mail) drops a cheeky hip-hop banger about SPF (Sender Policy Framework), schooling sender mans on authorized IPs, clean syntax, and why softfails and dodgy spoofers get slapped from the command. Booyakasha — it's authentication 101 with a mixtape swagger.
Authentication
Glossary
SPF — Sender Policy Framework
DNS-based mechanism (RFC 7208) that authorizes which IP addresses may send email on behalf of a domain via a TXT record. Evaluated at SMTP connection time against the envelope MAIL FROM domain, not the visible From header.
DKIM — DomainKeys Identified Mail
Cryptographic signature (RFC 6376) added to email headers by the sending MTA and verified using a public key published in DNS. Survives email forwarding unlike SPF.
DMARC — Domain-based Message Authentication, Reporting & Conformance
Policy layer (RFC 7489) built on SPF and DKIM. Allows domain owners to declare how receivers handle authentication failures. Requires identifier alignment between authenticated domain and visible From header.
ARC — Authenticated Received Chain
Protocol (RFC 8617) that preserves authentication results across email forwarding hops by cryptographically signing the original results at each forwarding step.
MTA-STS — Mail Transfer Agent Strict Transport Security
Policy mechanism (RFC 8461) allowing domains to declare TLS support for inbound SMTP, requiring sending MTAs to refuse unencrypted delivery.
BIMI — Brand Indicators for Message Identification
Standard that displays a brand logo next to authenticated messages in supporting mailbox providers. Requires DMARC at p=quarantine or p=reject plus a Verified Mark Certificate (VMC).
Other Topics
AuthenticationWarmupBounce ManagementList HygieneInbox PlacementSpam FiltersFBLReputationPostmaster ToolsEngagementPermissionComplianceEmail DesignSegmentation