Domain Connect - One-Click DNS Setup

Description:

Automatically configure all required DNS records (SPF, DKIM, DMARC) with a single

click through the Domain Connect open standard, instead of manually copying and

pasting 6 DNS records at your registrar.

Problem:

Setting up DNS records for email sending is the biggest friction point during

onboarding. Users need to add 6 records (1 TXT for ownership verification, 1 SPF

merge, 3 CNAME for DKIM, 1 TXT for DMARC) at their DNS provider. This is error-prone,

confusing for non-experts, and the #1 reason users drop off before sending their first

email.

Solution:

Integrate with the Domain Connect protocol, an open standard supported by major DNS

providers (GoDaddy, 1&1/IONOS, and others). When a user adds a domain, IvyMail checks

if their registrar supports Domain Connect. If it does, the user clicks a single

button, confirms the records at their provider's UI, and all 6 DNS records are applied

automatically. The user is redirected back to IvyMail and the domain is verified,

with no manual record entry required.

How it works:

1. User adds a domain in the dashboard

2. IvyMail detects if the registrar supports Domain Connect

3. If supported: user clicks "Auto-configure DNS", gets redirected to their provider,

confirms, and is redirected back with everything set up

4. If not supported: falls back to manual DNS instructions (existing flow)

Implementation plan:

- Backend: DNS discovery service, apply URL builder with HMAC-signed state tokens,

RSA-SHA256 query signing, callback handler with DNS propagation verification

- Frontend: Discovery UI in the DNS records dialog, callback page for provider

redirects

- Template: JSON template following the DC spec, submitted to the official Domain

Connect template registry for provider recognition

- Records configured: ownership verification TXT, SPF merge, 3 DKIM CNAMEs, DMARC TXT

Impact:

- Reduces domain setup from ~10 minutes of manual DNS work to ~30 seconds

- Eliminates copy-paste errors that cause failed verification

- Lowers onboarding drop-off for users on supported registrars

- Aligns with the core principle of "easier than using raw infrastructure directly