ESP Plan Only - Setting up Integrated Deliverability Testing

In order for SendForensics to perform an analysis of an email, the email needs to be sent to SendForensics via standard SMTP. This allows for a complete and thorough analysis of the email content and infrastructure.

It is recommended that an ESP includes a "Deliverability Test/Spam Test" facility within their application during the user's final stages of composing their campaign. When this facility is activated, the ESP will send an email to a predesignated SendForensics email address. The email should be sent exactly as it would be to the user's subscriber base, except that it must contain two additional custom headers (with an optional third for a search key). These custom headers identify the email to SendForensics systems for retrieval after analysis:

X-SendForensics-acc: ACCID:account_id;EMID:email_id;ANALYSISID:analysis_id;TIME:nonce;MODE:mode;LISTSIZE:list_size;CUSTOMERID:customer_id;LANG:language_iso;COISO:country_iso;REGION:region_code;INDCODE:industry_code
X-SendForensics-hmac: hashed_string
X-SendForensics-searchkey: search_key

You need to generate an encrypted identification header via the Hash Message Authentication Code (HMAC) method, using your unique API account information which can be found at the bottom of this page.

The HMAC is a cryptographic method used to verify that the originating email is authentic and that it originated from the correct provider. The SHA256 hash algorithm is employed to provide greater security.

To produce an HMAC signature, concatenate the account_id, password, email_id, analysis_id and nonce into a single string. You can then apply an HMAC hash function with the supplied token to produce the HMAC signature:

<?php
  $nonce = time();
  $string = $account_id . $password . $email_id . $analysis_id . $nonce;
  $hashed_string = hash_hmac('sha256', $string, $token);
?>

Actual values would look like:

<?php
$nonce = time();
$string = "ksTHnoAxhjss8ds.GH4a.H7201501231007201501231007T0021471875230";
$hashed_string = hash_hmac('sha256', $string, $token);
?>

So from those values, we can now we can set a custom header in our email:

X-SendForensics-acc: ACCID:ksTHnoAx;EMID:201501231007;ANALYSISID:201501231007T002;TIME:1471875230;MODE:live;LISTSIZE:50000;CUSTOMERID:853996;LANG:EN;COISO:FR;REGION:europe;INDCODE:FINS
X-SendForensics-hmac: 191d54ccfb64d8719f955357feaac5cef94e706f99916c55684cdf648e8561d7

The email sent to your unique email address provided by SendForensics for analysis needs to contain the custom headers. These will be used by SendForensics to authenticate the legitimacy of the email and prepare the analysis report for retrieval once complete. For account and security purposes, SendForensics will not process any emails that do not pass the HMAC validation step.

When a Deliverability Test is required, the email should be sent to your unique SendForensics EDC Analysis Address provided by us. This can be found on the account profile page.