Field Notes

Guidance you can actually implement

Short, specific write-ups on the controls we spend most of our time fixing. No vendor pitches.

HAPSA Technologies · reviewed 16 Sep 2026 · 6 min read

DMARC p=none under RFC 9989: what it means

Monitoring is legitimate, but it is not enforcement. Learn what the 2026 standard changed, why the legacy pct rollout pattern is obsolete and how to plan enforcement safely.

Read →

Want this checked on your domain?

The email-posture check reads public DNS records and explains what they do—and what a DNS-only snapshot cannot prove.

Get a free security assessment → Run the free domain check →