Glossary
The acronyms behind your findings
Every trust signal we check, defined in plain language: what it is, which standard defines it, and the way it actually breaks in production. One page per term.
Written by the SkyQon engineering team · Last verified 4 August 2026
Email authentication
- DKIM — DomainKeys Identified Mail — a cryptographic signature proving a message was not altered in transit.
- DMARC — Tells inboxes what to do with mail that fails SPF or DKIM, and where to send reports.
- MTA-STS — Forces inbound mail to your domain over authenticated, encrypted TLS.
- SPF — Sender Policy Framework — lists which servers may send mail for your domain.
- TLS-RPT — Delivers reports when TLS delivery to your mail servers fails.
DNS
Certificates & TLS
- Certificate Transparency — Certificate Transparency — public logs of every certificate issued, used to spot lookalikes and mis-issuance.
- OCSP — Online Certificate Status Protocol — a live check of whether a certificate has been revoked.
- OV / EV certificates — Organisation- and Extended-Validation certificates that bind a verified legal identity to a domain.
Identity & cryptography
- Post-quantum cryptography — Post-Quantum Cryptography — algorithms designed to resist attacks from quantum computers.
- QWAC — Qualified Website Authentication Certificate — an eIDAS-qualified certificate proving website identity in the EU.