Glossary
The technical terms that appear in Ward's findings, each explained in one plain line.
CVE
A public number that identifies a known security flaw in a program (for example, CVE-2024-1234). With it you can look up how to fix it.
DMARC
A rule your domain publishes to say what to do with emails that claim to come from you but fail the checks: let them through, send them to spam or reject them. It can also ask for reports.
SPF
A public list of the servers allowed to send email with your domain. If a message comes from anywhere else, the receiver gets suspicious.
TXT
A type of DNS record (the address book of your domain) that holds plain text. SPF, DMARC and domain verifications are published as TXT records.
MTA-STS
A public notice that your domain only wants to receive email over encrypted connections, so nobody can read it on the way.
DNSSEC
A digital signature on your domain's DNS that lets others check that its answers haven't been forged on the way.
RDAP
A public lookup that tells who registered a domain, when it expires and what state it is in. It replaces the old “whois”.
CAA
A DNS record where you say which companies may issue certificates (the padlock) for your domain. Any other should refuse.