Signed just now
microsoft.com
Psychevus attests that on 2026-11-07 19:05 UTC the public DNS of microsoft.com showed the records below, earning grade B.
- Grade
- B · 82/100 (3 of 3 inbox checks pass)
- DMARC
- v=DMARC1; p=reject; pct=100; rua=mailto:itex-rua@microsoft.com; ruf=mailto:itex-ruf@microsoft.com; fo=1
- SPF
- v=spf1 include:_spf-a.microsoft.com include:_spf-b.microsoft.com include:_spf-ssg-a.msft.net include:_spf1-meo.microsoft.com -all (6 of 10 lookups)
- DKIM
- selector2 (RSA 1024-bit), s1024 (RSA 1024-bit)
- MX
- microsoft-com.mail.protection.outlook.com
- MTA-STS
- on (enforce)
- DANE
- off
- TLS-RPT
- on
- DNSSEC
- off
- CAA
- off
- BIMI
- off
How it works
What it proves
That Psychevus read your domain’s public DNS at the stated time and saw exactly these records and this grade. It’s a statement about public facts, so no login or domain verification is needed — and it can’t be edited: the Ed25519 signature covers every character.
Who it’s for
Vendor security questionnaires that ask “do you enforce DMARC?”, cyber-insurance applications, auditors, and agencies handing a fixed domain back to a client. Send the link; they verify it in one click, or offline.
Verify it yourself
The proof is a standard JWS. Fetch the keys from /.well-known/psychevus-proof-keys.json and check it with any JOSE library, e.g. jose.compactVerify(token, key) in JavaScript, or call /api/v1/proof?token=….