CertaDNS
Skip to lesson

The Controls as One System · lesson 1 of 3

Where each control sits

After this lesson you can

Map every control you have learned onto the surface it defends.

Assumes you have read The four surfaces.

Fifteen controls across two tracks, placed on one surface each, with what they assert and to whom. This is the reference the rest of the course assumes.

Identity

ControlAssertsTo
SPFThese hosts may use this domain as an envelope senderReceiving mail servers
DKIMThis domain signed this messageReceiving mail servers
DMARCTreat unaligned mail claiming this From domain as followsReceiving mail servers
CAAOnly these authorities may issue certificates for this nameCertificate authorities
Transfer lockThis domain may not be transferredThe registry, via the registrar
Registry lockThis domain may not be changed without an out-of-band processThe registry

Integrity

ControlAssertsTo
DNSSECThese records are as this zone published them, and these do not existValidating resolvers
DKIM body hashThis message body is unmodified since signingReceiving mail servers
TSIGThis zone transfer request is authorisedYour own secondaries
Certificate TransparencyEvery certificate for this name is publicly visibleAnyone watching, including you

Transport

ControlAssertsTo
MTA-STSRequire TLS to these hosts, with a valid certificateSending mail servers
DANEExpect exactly this key at this hostSending mail servers that validate
TLS-RPTTell me when transport security failedSending mail servers

Perception

ControlAssertsTo
BIMIThis logo belongs with mail from this domainMail clients, and then a human
Monitoring and takedownNothing — it removes the thing being perceivedNobody. It acts rather than asserts.
User-facing warningsThis message is from outside the organisationA human

Read the “to” column

Almost every control addresses a machine, and a machine either implements it or does not. Only the perception surface addresses a person, and people are not configurable. That asymmetry is why the technical surfaces can be finished and the perception surface never can.

Last reviewed