Why are security warning emails so vague?
Security notifications often fail to provide specific error details or pinpoint where an issue originates, leaving teams unable to determine if their organization is actually affected. Without actionable information, administrators are forced to manually audit logs and guess whether the warnings apply to production instances or forgotten sandboxes.
What people tried
Every workaround mentioned in the threads below. We haven’t tested any of them — and nobody here is claiming they worked.
- 1Running email logs in Setup
- 2Checking domain verification settings manually
- 3Submitting support cases
- 4Forwarding emails to consultants or colleagues for advice
- 5Checking underlying redirect links such as aka.ms
- 6Searching external blogs and articles to verify if a notification type exists
In their words
Unedited, most upvoted first, each linked to the thread it came from.
“To add to this I am not actually sure the email is correct, since everything we send out comes from our DKIM verified domain.”source ↗
“If Salesforce can actually tell me what's wrong and where they have identified an issue, then maybe we can do something about it.....”source ↗
“Glad to see it’s not just me. I ran logs of every email sent from our org over the last 30 days and they were all either @salesforce.com or @<our already DKIM’d company domain>.net. Would love some insight on this”source ↗
“Just received the following email that passes SPF and DKIM from outlooksupport at outlook.mail.microsoft”source ↗
“Is this something real? When exactly is the year 0001?”source ↗
“Same, I suspect a Sandbox issue since I don't think DKIM keys are auto copied, but the Org ID is my production instance.”source ↗
“This is what I thought. Either my dev sandboxes or it was a blanket reminder. But JFC they are TERRIBLE communicators.”source ↗
“Is this satire? That is the most scammy looking email”source ↗
“I don't know whether the email is legitimate or not, I haven't seen that before”source ↗
Where this came up
People with this problem also raised
- 3Why is security software generating so many false alerts?
- 6How to tell if an electrical issue is dangerous or normal
- 9Dashboard warning lights stay on but OBD2 scanner shows no errors
- 2Low oil warning light on even though oil is full
- 6Getting weird scam letters or emails from banks I don't use
- 2Why is rushed custom software so insecure?