Starting from the legacy product, we had all the required functionality. But users were missing the narrative. Mailchimp is hard to find on these config pages.
I designed a cybersecurity platform to help organizations enforce DMARC for their emailing domains.
DMARC is an open internet standard used by mailboxes (Gmail, Yahoo, Microsoft, etc) to identify phishing. It works by letting you publish an allowlist of good senders, then lock out everyone else. This prevents scammers from emailing your customers as if they are your company! Imagine this for Uber, Amazon, of Citibank! The user pain point is that someone has to figure out every service that sends for the domain and do some setup for each sender. Imagine doing this for uber.com! The DMARC journey can be really hard and many organizations try and fail.
This product is really cool because it lets you register your senders very easily and tells you if they need additional work, such as enabling cryptographic signatures.
This case study covers the sender configuration panels, which are at the heart of the system. The idea is that the interface should tell you what to do, if anything, to get these emailing services to pass the standard, so you can lock out phishers.
