How do you verify all authentication records (SPF, DKIM, DMARC, BIMI)?

Complete authentication record verification:

SPF:

dig TXT tidalmail.com

Look for v=spf1 record

Validate with SPF checker

DKIM:

dig TXT selector._domainkey.tidalmail.com

Need selector name from ESP

Verify key exists and is valid

DMARC:

dig TXT _dmarc.tidalmail.com

Check policy and report addresses

BIMI:

dig TXT default._bimi.tidalmail.com

Verify logo URL and optional VMC

Check all four. Missing any one leaves gaps in your authentication posture.

Review all credentials in the ship's portfolio. Missing any document raises questions.