CaptainDNS Blog

Visual comparison between the WHOIS protocol (legacy, plain text) and RDAP (modern, structured JSON) with the ICANN transition timeline

CaptainDNS · March 17, 2026

RDAP vs WHOIS: the complete guide to the transition (EPP codes, GDPR, domain locks)

WHOIS is retiring. RDAP replaces it. This guide covers everything: technical comparison, EPP codes, GDPR impacts, domain locks, and a migration plan.

Comparative diagram of 301 and 302 redirects showing SEO impact, PageRank transfer and domain migration checklist

CaptainDNS · March 16, 2026

301 vs 302 redirect: understand the differences, SEO impact and succeed with your domain migration

301 permanent or 302 temporary? Understand the SEO impact of each code, avoid common mistakes and follow our domain migration checklist.

Diagram showing a vanity URL captaindns.com redirected to a landing page with click counter and QR code

CaptainDNS · March 16, 2026

Vanity URLs, link tracking and QR codes: the complete guide to marketing redirects

Create memorable branded links, track clicks and measure offline-to-online traffic with smart redirects.

The 4 email security tools managed by CaptainDNS: MTA-STS, BIMI, TLS-RPT and DMARC

CaptainDNS · March 13, 2026

Email Security: The 4 Essential Tools, from €3/month

MTA-STS, BIMI, TLS-RPT, DMARC: CaptainDNS hosts and monitors your email security protocols. Start with 1 free tool, then from €3/month. No server required.

Diagram showing the progression of MTA-STS deployment from testing mode to enforce mode

CaptainDNS · March 10, 2026

From testing to enforce: a progressive MTA-STS deployment strategy

Testing mode monitors, enforce mode blocks. This guide details the four steps to deploy MTA-STS progressively, from the initial policy to TLS-RPT reports, through to switching to enforce.

Comparative diagram of MTA-STS and DANE protocols for email transport security

CaptainDNS · March 10, 2026

MTA-STS vs DANE: which protocol to choose for securing email transport?

MTA-STS uses HTTPS, DANE relies on DNSSEC. Both enforce mandatory TLS encryption between email servers, but they deploy differently. Complete comparison to make the right choice.

Diagram of an SMTP downgrade attack showing an attacker intercepting the STARTTLS connection between two email servers

CaptainDNS · March 9, 2026

SMTP Downgrade Attacks: How They Work and How to Defend Against Them

STARTTLS encrypts your emails, but a network attacker can strip that protection away. Learn how SMTP downgrade attacks work and what solutions block them.

CaptainDNS · March 8, 2026

BIMI Logo Not Showing: 5 Common Errors and How to Fix Them

Valid DMARC, published BIMI record, but still no logo in the inbox. This guide identifies the 5 most common causes and details what to do.

Diagram of the Microsoft 365 MX migration from mail.protection.outlook.com to mx.microsoft with DNSSEC

CaptainDNS · March 6, 2026

Microsoft 365 MX Migration to mx.microsoft: Automatic DNSSEC, Mandatory Graph API, and Action Items Before July 2026

Microsoft is changing DNS provisioning for Exchange Online domains. MX records are moving from mail.protection.outlook.com to mx.microsoft to streamline DNSSEC adoption. Here's what's changing and what you need to do.

Visual comparison of RSA 2048 and Ed25519 algorithms for DKIM signing

CaptainDNS · March 6, 2026

RSA vs Ed25519 for DKIM: which signing algorithm should you choose?

Technical comparison of RSA 2048 and Ed25519 algorithms for DKIM signing: performance, security, compatibility, and migration strategy.

Articles - Page 5