The KumoDNS blog

SPF, DKIM and DMARC, in plain terms The three TXT records that decide whether your mail is trusted, what each one actually checks, and the order to set them up so you never reject your own email. 30 September 2026 · Jimmy MX records: priorities, backups and three myths How mail servers are chosen, what the priority number really does, why a lower number wins, and the common mistakes that quietly send mail to the wrong place. 23 September 2026 · Grace Is DNSSEC ready for quantum computers? What post-quantum cryptography means for DNS, why no provider offers it yet, and why DNSSEC is less urgent than the rest of your stack. 16 September 2026 · Grace Why a CNAME cannot live at your domain's apex The rule that breaks apex records, why it exists in the DNS standard rather than in your provider, and the three ways around it. 8 September 2026 · Jimmy Why your DNS change has not taken effect yet TTL, caching and the myth of propagation — why a record you changed an hour ago still serves the old value, and how to plan a change around it. 31 August 2026 · Alex How a DNS lookup actually works The path from typing a name to getting an address — caches, root servers, TLDs and the authoritative answer — and why each step matters when something breaks. 24 August 2026 · Grace