Skip to content

Editorial team

Portrait of Saskia Visser
Years at Blue Spirit
6
Industry years
13
Posts on this blog
2
Languages
4

Saskia Visser

Senior MTA Engineer · DKIM & ARC Specialist

📍 Eindhoven, Netherlands

Senior MTA engineer focused on cryptographic email authentication — DKIM key lifecycle, ARC sealing, BIMI/VMC chain management. Came up through the Postfix and Exim communities before specialising in commercial PowerMTA work; she still maintains contributions to OpenDKIM and OpenARC.

Background

Saskia is the deliverability team's authentication and cryptography specialist. Before joining Blue Spirit in 2020, she spent five years at TransIP (Dutch hosting provider) running the abuse-and-authentication function for their dedicated mail platform, and four years before that at a small Eindhoven security consultancy doing DKIM-and-DMARC remediation for Dutch banks and government agencies adapting to NTA 7516 (the Dutch healthcare email security standard).

Her current focus is the operational migration from RSA-2048 DKIM to ed25519, the rollout of dual-signing fallback strategies, and the increasingly important ARC sealing layer for forwarded mail. She wrote the internal Blue Spirit ed25519 rollout playbook in late 2024 — the document that was used to migrate all 11,400 client domains over a 16-week window with under 0.5% measured deliverability impact at any point in the transition.

Saskia is a regular contributor to OpenDKIM (specifically the key rotation tooling) and submitted three patches to the OpenARC project addressing edge cases in cv= tag handling for chains exceeding 3 hops — bugs that originally surfaced as a production incident on Blue Spirit's own ARC sealing service in October 2026 and were fully reproduced in upstream test corpora before submission.

She holds a CISSP and is a member of the IETF DKIM Working Group rechartered effort. Outside work she practices Brazilian Jiu-Jitsu (purple belt as of 2025), keeps a ham radio licence, and grows tomatoes obsessively in her allotment garden.

Areas of expertise

Click any area to filter the post list below to Saskia's writing on that topic.

Education

  • TU Eindhoven

    MSc Information Security Technology

    2009–2011 · Netherlands

  • Radboud University

    BSc Computer Science

    2006–2009 · Netherlands

Certifications

  • CISSP — Certified Information Systems Security Professional

    (ISC)² · 2017

  • OSCP — Offensive Security Certified Professional

    Offensive Security · 2014

  • M3AAWG Authentication & Reputation Working Group — Member

    M3AAWG · 2021–present

Languages

  • Dutch (native)
  • English (C2)
  • German (B2)
  • Spanish (A2)

Selected projects at Blue Spirit

A non-exhaustive list of work Saskia has led or contributed to, with the operational metrics that came out of each.

ed25519 DKIM migration program

2024 Q3–2025 Q1

Designed and led the 16-week migration of all 11,400 Blue Spirit client domains from RSA-2048 to ed25519 DKIM signatures, including dual-signing fallback for receivers without ed25519 support. Wrote the internal playbook that became the basis for two M3AAWG presentation drafts.

  • Domains migrated: 11,400
  • Migration window: 16 weeks
  • Worst-case deliverability impact: <0.5% on any single ISP
  • Receiver compatibility coverage: 99.7% at cutover

ARC sealing daemon hardening

2026 Q4

Diagnosed and patched a regression in ARC cv= tag handling for chains exceeding 3 hops that surfaced as production incident INC-2026-05. Submitted three upstream patches to OpenARC and built an extended chain validation test corpus that is now part of Blue Spirit's pre-deploy CI.

  • Upstream patches accepted: 3 (OpenARC)
  • Test corpus expanded: 47 → 312 cases
  • CI pre-deploy coverage: 99.4% of observed forwarded-mail patterns

BIMI VMC chain renewal automation

2024 Q1–Q2

After an MVA-issued intermediate certificate renewal was missed in February 2024 (incident INC-2024-01), built the pre-fetch automation that now retrieves new VMC chain intermediates 30 days ahead of expiry. Logo resolution incidents have not recurred in 24 months.

  • BIMI logo resolution uptime since deployment: 99.99%
  • Pre-fetch lead time: 30 days
  • Client domains protected: 187

Want Saskia on your engagement?

Senior engineers handle every Blue Spirit account directly. If you have a deliverability or compliance question that fits Saskia's background, we'll route the conversation to them.

Chat with us on WhatsApp