Knowledge & background

Explained in plain terms: what we check, why it matters and how to improve. No jargon, no scare tactics.

All checks in detail

Every single test Checkvanta runs — what is checked, why, and why it matters. Generated automatically from our scoring rules, so it is always up to date.

25 July 2026

What does my score mean?

How the Checkvanta score is composed, why there are two blocks, and what "not applicable" means.

25 July 2026

RPKI: stop anyone from hijacking your IP addresses

How route origin validation ensures your IP addresses are really announced by you.

25 July 2026

CAA records: decide who may issue certificates for you

With a single DNS record you control which certificate authorities may issue certificates for your domain.

25 July 2026

DANE & TLSA: anchoring the certificate in DNS

How DANE pins which certificate a mail server must use — and why that frustrates man-in-the-middle attacks.

24 July 2026

DNSSEC: authenticity checks for the internet's phone book

DNS turns names into addresses — but how do you know the answer is genuine? DNSSEC is the answer.

22 July 2026

HTTPS and HSTS: why the padlock alone isn't enough

Encryption only protects you if it's actually enforced. Here's where HSTS comes in.

20 July 2026

SPF, DKIM and DMARC: email spoofing made simple

Why these three acronyms decide whether strangers can send mail in your name — and how to set them up properly.