Out of 100 on the internet.nl mail test, 30 September 2026.
We hold our own server to the standard we sell you.
OxiMail’s claim is that mail done right is the default, not an option. So our own mail server, the one behind oximail.ch, is measured in public. Each line below links to an independent tool that tests our domain.
The measurements
Seven checks, each one yours to rerun.
- 100 % on internet.nlThe reference test of the Dutch Internet Standards Platform, with every category passed: IPv6, DNSSEC, anti-phishing marks, secure connection, route authorisation. Run the test →
- Every record signed (DNSSEC)The domain and the mail server’s name are signed, and the signatures validate. A resolver that checks them cannot be sent to a false server. Run the test →
- DANE on the mail serverA TLSA record, itself signed, pins the key of our certificate. A sending server that supports DANE cannot be tricked into an unencrypted or intercepted connection. Run the test →
- STARTTLS with TLS 1.3Mail arrives encrypted, with the current version of TLS and cipher suites recommended today. Run the test →
- IPv6, and reverse names that matchThe mail server answers in IPv4 and in IPv6, and each address’s reverse name points back to the server, which points back to the same address. Receiving servers check this before they trust a sender. Run the test →
- Routes authorised (RPKI)The networks that carry our addresses publish who may announce them. A network that validates routes will not follow a hijacked one to us. Run the test →
- SPF, DKIM and DMARCOur domain says which servers may send in its name, signs what it sends, and tells receivers what to do with the rest. Run the test →
Measured on 30 September 2026. The internet.nl links show the result of that day; the other tools, and the rerun below, test our domain again now. What they show is the current state, and it is not ours to edit.
Your server, held to the same standard.
An OxiMail server does its part from the first day: current TLS, DKIM keys, and the SPF, DMARC and DANE records, which it can publish itself on Cloudflare or on your own DNS server. What depends on you, such as signing your zone or the reverse names of your addresses, oximail check-dns tells you. Tell us about your domain and we show you where it stands.