{
  "domain": "github.com",
  "status": "NOERROR",
  "grade": "B",
  "counts": {
    "ok": 4,
    "warn": 2,
    "fail": 0,
    "info": 4
  },
  "checks": [
    {
      "check": "MX",
      "status": "ok",
      "text": "Microsoft 365: github-com.mail.protection.outlook.com"
    },
    {
      "check": "SPF",
      "status": "ok",
      "text": "ends in ~all; 10 of 10 DNS lookups (close to the limit)"
    },
    {
      "check": "SPF",
      "status": "info",
      "text": "uses macros (%{...}), which depend on the sender: those lookups are counted but not followed"
    },
    {
      "check": "DMARC",
      "status": "ok",
      "text": "p=quarantine: mail that fails goes to spam; reports go to dmarc@github.com"
    },
    {
      "check": "DKIM",
      "status": "ok",
      "text": "keys at google (2048-bit RSA), selector1 (1024-bit RSA), k1 (1024-bit RSA), s1 (2048-bit RSA)"
    },
    {
      "check": "DKIM",
      "status": "warn",
      "text": "the key at selector1 is 1024-bit RSA, too short to count on",
      "fix": "publish a 2048-bit key under a new selector, sign with it, then remove the old one"
    },
    {
      "check": "DKIM",
      "status": "warn",
      "text": "the key at k1 is 1024-bit RSA, too short to count on",
      "fix": "publish a 2048-bit key under a new selector, sign with it, then remove the old one"
    },
    {
      "check": "MTA-STS",
      "status": "info",
      "text": "not set up (optional: it makes sending servers insist on an encrypted connection to your mail servers)"
    },
    {
      "check": "TLS-RPT",
      "status": "info",
      "text": "not set up (optional: daily reports from senders about TLS problems reaching you)"
    },
    {
      "check": "BIMI",
      "status": "info",
      "text": "no logo (optional: some inboxes show a brand logo next to your mail)"
    }
  ],
  "selector": null,
  "nullMx": false,
  "mx": {
    "records": [
      {
        "priority": 0,
        "host": "github-com.mail.protection.outlook.com"
      }
    ],
    "providers": [
      "Microsoft 365"
    ],
    "mixedNull": false
  },
  "spf": {
    "records": 1,
    "record": "v=spf1 ip4:192.30.252.0/22 include:spf.protection.outlook.com include:_netblocks.google.com include:_netblocks2.google.com include:mail.zendesk.com include:_spf.salesforce.com include:servers.mcsv.net include:mktomail.com include:sendgrid.net ip4:62.253.227.114 ip4:166.78.69.169 ip4:166.78.69.170 ip4:166.78.71.131 ~all",
    "all": "~all",
    "redirect": null,
    "redirectMacro": false,
    "lookups": 10,
    "overLimit": false,
    "counted": true,
    "includes": [
      "spf.protection.outlook.com",
      "_netblocks.google.com",
      "_netblocks2.google.com",
      "mail.zendesk.com",
      "_spf.salesforce.com",
      "servers.mcsv.net",
      "mktomail.com",
      "sendgrid.net",
      "ab.sendgrid.net"
    ],
    "errors": [],
    "unresolved": [],
    "passAll": [],
    "ptr": false,
    "macros": true,
    "onlyFail": false
  },
  "dmarc": {
    "record": "v=DMARC1; p=quarantine; sp=reject; pct=100; rua=mailto:dmarc@github.com; ruf=mailto:dmarc@github.com; fo=1",
    "policy": "quarantine",
    "subdomainPolicy": "reject",
    "nonexistentPolicy": null,
    "pct": 100,
    "testing": false,
    "rua": [
      "dmarc@github.com"
    ],
    "ruf": [
      "dmarc@github.com"
    ],
    "adkim": "relaxed",
    "aspf": "relaxed",
    "records": 1,
    "from": "github.com",
    "inherited": false
  },
  "dkim": {
    "selectors": [
      "google",
      "selector1",
      "selector2",
      "default",
      "k1",
      "s1"
    ],
    "keys": [
      {
        "selector": "google",
        "keyType": "rsa",
        "revoked": false,
        "bits": 2048,
        "testing": false,
        "record": "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6T5sl/RwdSqGoYWaWaFbS2UAeyPrEmd0gogocmRfS441qwR8/0KB81Hw89P0l4YiFRrXYk7NVIGfyCRHAYYZUzCkGeOysI2EjgzLFhd/NEsbRzOEc/kWkK/RO6JFq/5lOn6M9AZw/ap9tds4JG9ApgNNdSpPxp9DmvpsOSgNMVflRxQFrk3kdS4RNAPKu/OPoA7dlR/A/pECryjRoYgENtDXzdnK70HgCekems6UDzxDj"
      },
      {
        "selector": "selector1",
        "keyType": "rsa",
        "revoked": false,
        "bits": 1024,
        "testing": false,
        "record": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCxZC/z2cK+2s1f/ktzSDSeFzkfIHrjwtGFsfKMAYvKaXjPVNzKykpbXBkX5nB7dVUTFttda7aROr2iSrIseQ27Ui+4rUZVzgFanE8RaXhYM9n5wPKNv8GtLJk7JgcsYZ7ErgID4uW2sEYyV/dnRYw6rDzOaeRKkKELTUfJI5ebLQIDAQAB;"
      },
      {
        "selector": "k1",
        "keyType": "rsa",
        "revoked": false,
        "bits": 1024,
        "testing": false,
        "record": "k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUoNyIR4Bn84LVcfZE20rmDeXQblIupNWBqLXM1Q+VieI/eZu/7k9/vOkLSaQQdml4Cv8lb3PcnluMVIhQIDAQAB;"
      },
      {
        "selector": "s1",
        "keyType": "rsa",
        "revoked": false,
        "bits": 2048,
        "testing": false,
        "record": "k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyn3fMCVpb7ryIRKOGXhXVGYmsWUitNlSckqGHOwNFZgFadplOrD+Qzf1XQkP7MH/VB/97DsAAJGtEXW1Uq71Hjnfr/DuBN/YfjF/gU70qEFb7q1sdIiNtjFL2TkOpoW+X/bhhPNheW/fYwyFb6ZHFM6LTgXyuimWRHTOUP3VjZzhNVda79nt+2WZYbS4l8HdMgWpTNHjpVw5PtXESA9KBg/evSRk5fIaXIX5eRXW3baoV9yVzD"
      }
    ],
    "unanswered": []
  },
  "mtaSts": null,
  "tlsRpt": null,
  "bimi": null,
  "unread": {},
  "source": "cloudflare-dns",
  "subrequests": 21
}