Renewing that pesky “Microsoft Exchange” certificate

    You know the one I am taking about. The self-signed certificate with a friendly name of “Microsoft Exchange” that each server issues by itself to itself. They are valid for 5 years , then suddenly, they are not. When on-premises was king, you rarely saw any questions about these. They just worked – andContinue reading “Renewing that pesky “Microsoft Exchange” certificate”

Authenticating trusted messages with Exchange and Office 365

One of the rather interesting side effects of moving your mailbox to Exchange Online is the change in behavior of the old trusty Safe Sender list. If if your mail client trusts only messages sent from a safe sender, all other messages will end up in junk mail. This is change from on-premises – where onlyContinue reading “Authenticating trusted messages with Exchange and Office 365”

Selectors: The Magic Sauce of DKIM

One question I see a lot is “How can I let 3rd party vendors send as our organization using DKIM?” It’s a lot easier than you think. The trick is in the selector. Per RFC 6376:  To support multiple concurrent public keys per signing domain, thekey namespace is subdivided using “selectors”.   Implementing this is pretty straight-forward, so let’s getContinue reading “Selectors: The Magic Sauce of DKIM”