Email security report card · 2026-11-07
notion.so
notion.so scores 82/100 (grade B). Legitimate mail proves where it comes from, so Gmail and Outlook trust it. Forged mail “from” notion.so is sent to spam by the big inboxes. The most valuable next step: turn on DNSSEC.
B82/100
| Area | Check | Status | Points |
|---|---|---|---|
| Authentication | SPF and DKIMYes — your mail proves where it comes from. SPF: SPF lists the servers allowed to send as you. DKIM: Your mail carries a signature inboxes can verify (2048-bit). | Pass | 25/25 |
| Anti-spoofing | DMARC enforcementMail that fails your checks goes to spam. | Pass | 26/30 |
| Delivery | Google, Yahoo and Microsoft sender rulesYes — you meet the published sender requirements. | Pass | 15/15 |
| Encryption | MTA-STSThis domain receives no email, so it isn’t needed. | Not needed | — |
| Encryption | TLS-RPTAdd a TXT record at _smtp._tls.notion.so: v=TLSRPTv1; rua=mailto:tls-reports@notion.so | Not needed | — |
| DNS hardening | DNSSECNot signed. Turn on DNSSEC at Cloudflare; if the domain is registered elsewhere, add the DS record it gives you at your registrar. | Missing | 0/8 |
| DNS hardening | CAAAny certificate authority may issue certificates for your domain. A CAA record such as 0 issue "letsencrypt.org" limits it to the ones you use. | Missing | 0/4 |
| Brand | BIMI logoLogo and VMC published (issued by DigiCert, Inc., valid until 2027-04-09). Gmail, Apple Mail and Yahoo can show it. | Pass | 6/6 |
What if you fixed…
Today B 82/100
Fix next
- Turn on DNSSEC
- Turn on CAA
Exact records and where to click: full check for notion.so.
Lookalike exposure
Not scanned this time (scan limit reached). Run the lookalike radar.