Generate RFC-compliant email security and DNS zone records with copy-ready BIND declarations.
Execution runs 100% locally inside the browser sandbox using HTML5 Canvas, Web Cryptography Subtle API, and Web Workers. Zero egress.
Zero network latency. Operates completely offline with zero dependencies on third-party backend servers or cloud services.
Built according to official RFC specifications, cryptographic test vectors, and enterprise-grade data transformation standards.
Type your domain name (e.g. example.com).
Choose DMARC, SPF, MX, or DKIM.
Select enforcement mode (e.g. p=reject for DMARC) and copy the DNS TXT record value.
DMARC prevents phishing attacks by verifying that sender addresses match authenticated SPF and DKIM signatures, boosting email inbox deliverability.
~all indicates SoftFail (accept but flag non-matching mail), while -all indicates HardFail (strictly reject unauthorized mail).
Zero-egress companion tools in the Developer Tools suite
Convert raw CSS declarations, selectors, and stylesheets into clean Tailwind CSS classes.
Transpile JSON Schema Draft 7 & 2020-12 into strict TypeScript interfaces and runtime Zod schemas.
Generate compliant RFC 1035 BIND zone files with SOA, NS, A, AAAA, CNAME, MX, and TXT records.
Convert legacy TypeScript numeric/string enums into modern, bundle-friendly string union types.
