wikipedia.org

Subcheck breakdown

Check	Status	Score
DMARC policy	reject	25/25
SPF record	ok	10/10
DKIM selector	missing	0/10
TLS certificate	ok	20/20
WHOIS integrity	whois rate limited	5/10
Subdomain takeover	ct logs busy	10/15
MTA-STS / TLSRPT	missing	0/5
DNSSEC	unsigned	0/5

Recommendations

• Publish a DKIM key at default._domainkey.wikipedia.org (v=DKIM1; k=rsa; p=…)
• Publish MTA-STS: add _mta-sts.wikipedia.org TXT and host a policy at https://mta-sts.wikipedia.org/.well-known/mta-sts.txt
• Enable DNSSEC on wikipedia.org — DS records must be published to the org zone by your registrar

Details

Area	Detail
DMARC	v=DMARC1; p=reject; rua=mailto:dmarc-rua@wikimedia.org;
SPF	v=spf1 include:_cidrs.wikimedia.org ~all
DKIM selectors	—
TLS certificate	Ok (55 days remaining) — CN=E7,O=Let's Encrypt,C=US
WHOIS registrar	—
WHOIS expires	—
Subdomains	CT logs temporarily unavailable — retry shortly
DNSSEC	Unsigned