=== InboxAuth - Email Authenticity ===
Contributors: gowebsmarty
Tags: dmarc, spf, dkim, email spoofing, email security
Requires at least: 5.8
Tested up to: 7.1
Requires PHP: 7.0
Stable tag: 1.0.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Verify your domain's email authenticity and discover who's sending as you, then generate SPF/DKIM/DMARC records to stop spoofing — step-by-step setup wizard.

== Description ==

InboxAuth scans your domain's SPF, DKIM, and DMARC records, then walks you through
a guided setup to close the gaps:

1. **DNS Scan** — checks your current SPF, DKIM, and DMARC records.
2. **Connect Mailbox** — validates an IMAP connection to a `reports@yourdomain.com`
   mailbox that will receive DMARC aggregate reports.
3. **Set DMARC** — walks you through publishing a starter DMARC record
   (`p=none`, `rua=mailto:reports@yourdomain.com`) so reports start flowing in.
4. **Observer Mode** — runs a 48-hour window, then automatically parses every DMARC
   aggregate report received via IMAP to build a list of everyone sending mail as
   your domain.
5. **Generate Records** — once you've confirmed which senders are legitimate, generates
   a tailored SPF record plus a DMARC record with your choice of `quarantine` or
   `reject` enforcement, and validates both live via DNS.

The Dashboard gives an at-a-glance view of SPF/DKIM/DMARC status, an overall Email
Security Score, a one-click re-scan, and a link to test whether your domain can
currently be spoofed via the companion Email Authenticity Checker tool.

= Requirements =

* PHP's `imap` extension enabled (for Step 2 / Step 4 mailbox access)
* PHP's `zip` extension enabled (Step 4 unpacks .zip-attached DMARC reports)
* Outbound DNS resolution available to the server (standard on virtually all hosts)

== Installation ==

1. Upload the plugin zip file via PLUGINS > ADD NEW in your wp-admin.
2. Activate the plugin.
3. Go to **Email Authenticity Checker → Dashboard** to begin, located on sidebar menu item within wp-admin.

== Frequently Asked Questions ==

= What if I don't have IMAP access to a reports@ mailbox? =

Step 2 requires a real mailbox at `reports@yourdomain.com` since DMARC aggregate
reports are delivered as email attachments. Most hosting control panels let you
create one in a couple of clicks.

== Changelog ==

= 1.0.0 =
* Initial release.
