Signed just now
cnn.com
Psychevus attests that on 2026-11-07 19:05 UTC the public DNS of cnn.com showed the records below, earning grade B.
- Grade
- B · 76/100 (3 of 3 inbox checks pass)
- DMARC
- v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email; ruf=mailto:Njk3@ruf.vali.email
- SPF
- v=spf1 include:cnn.com._nspf.vali.email include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:mail.zendesk.com ~all (3 of 10 lookups)
- DKIM
- selector1 (RSA 2048-bit), k1 (RSA 1024-bit), s1 (RSA 2048-bit), s2 (RSA 2048-bit), k2 (RSA 2048-bit), k3 (RSA 2048-bit)
- MX
- cnn-com.mail.protection.outlook.com
- MTA-STS
- off
- DANE
- off
- TLS-RPT
- off
- DNSSEC
- off
- CAA
- off
- BIMI
- on
How it works
What it proves
That Psychevus read your domain’s public DNS at the stated time and saw exactly these records and this grade. It’s a statement about public facts, so no login or domain verification is needed — and it can’t be edited: the Ed25519 signature covers every character.
Who it’s for
Vendor security questionnaires that ask “do you enforce DMARC?”, cyber-insurance applications, auditors, and agencies handing a fixed domain back to a client. Send the link; they verify it in one click, or offline.
Verify it yourself
The proof is a standard JWS. Fetch the keys from /.well-known/psychevus-proof-keys.json and check it with any JOSE library, e.g. jose.compactVerify(token, key) in JavaScript, or call /api/v1/proof?token=….