🐞 Airflow email notifications marked as probable spoofed sender

[jacobwoffenden]

Describe the bug.

Data Engineering have reported that email notifications from Airflow are being marked with:

[PROBABLE SPOOFED SENDER]

The from address is [email protected]

This has started happening after Operations Engineering started modifying @digital.justice.gov.uk's mail security (Slack thread) to align with NCSC standards.

To Reproduce

TBC

Expected Behaviour

Mail is delivered without issue or warning

Additional context

Using a scoped domain is probably the way forward, we don't need to use Justice Digital's root domain, instead we can use a service domain, e.g. @airflow.analytical-platform.service.justice.gov.uk or @airflow.data-engineering.service.justice.gov.uk, the former if Analytical Platform now own Airflow

[jacobwoffenden]

Engaged with Operations Engineering to add Amazon SES DKIM records to digital.justice.gov.uk domain (https://mojdt.slack.com/archives/C01BUKJSZD4/p1712051983138979)

[jacobwoffenden]

Operations Engineering have added the DKIM records. Domain is now showing as validated in Amazon SES.

Have asked a Data Engineering customer to test email function again.

[jacobwoffenden]

We've had confirmation that this is resolved!

https://mojdt.slack.com/archives/C8X3PP1TN/p1712072758672339?thread_ts=1711623012.257809&cid=C8X3PP1TN