{"id":7173,"date":"2021-01-26T12:41:41","date_gmt":"2021-01-26T12:41:41","guid":{"rendered":"https:\/\/outofsite.biz\/cynance\/?p=7173"},"modified":"2021-03-09T15:26:23","modified_gmt":"2021-03-09T15:26:23","slug":"improve-email-security-dmarc-email-authentication","status":"publish","type":"post","link":"https:\/\/outofsite.biz\/cynance\/improve-email-security-dmarc-email-authentication\/","title":{"rendered":"Up Your Email Security Game With DMARC Email Authentication"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"7173\" class=\"elementor elementor-7173\">\n\t\t\t\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-45e0897e elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"45e0897e\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-2a13f229\" data-id=\"2a13f229\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-264884f6 elementor-widget elementor-widget-text-editor\" data-id=\"264884f6\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.11.5 - 14-03-2023 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#818a91;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#818a91;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">The battle against phishing, spam, and malicious emails is never ending. <\/span><a href=\"https:\/\/www.forbes.com\/sites\/johnkoetsier\/2020\/05\/11\/scammers-send-31-billion-domain-spoofing-emails-a-day-heres-how-to-protect-yourself-and-your-company\/?sh=660df4d448cb\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">3.1 billion domain spoofing emails<\/span><\/a><span style=\"font-weight: 400;\"> are sent every single day, forcing email provider filters to work extra hard to filter out malicious emails and prevent them from reaching inboxes. In this ongoing, multifaceted battle, DMARC email authentication is one way that every organisation can help reduce the volume and damage caused by spam emails.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">What is DMARC?<\/span><\/h2>\n<p style=\"font-weight: 400;\"><a href=\"https:\/\/dmarc.org\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">DMARC<\/span><\/a><span style=\"font-weight: 400;\"> stands for Domain-based Message Authentication, Reporting and Conformance<\/span><\/p>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">email authentication policy and reporting protocol. Its purpose is to make it easier for email senders and receivers to determine whether or not a message is genuine, and what to do if it isn\u2019t. By creating a two-way process, DMARC email authentication makes it easier to spot spam and phishing emails, and prevent them from reaching email inboxes.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">How does DMARC email authentication work?<\/span><\/h2>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">DMARC email authentication enables domain owners to register their domain, and identify the IPs from where genuine emails using that domain will originate. When a sent email is received by an ISP, the receiving ISP will check the <\/span><a href=\"https:\/\/dmarcian.com\/dmarc-record\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">DMARC record<\/span><\/a><span style=\"font-weight: 400;\"> for the sender\u2019s domain, checking first whether the email can be authenticated, and if not, the DMARC record will provide instructions for what to do with it.<\/span><\/p>\n<p style=\"font-weight: 400;\">\n<\/p><p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">DMARC email authentication builds on the authentication of two other protocols, SPF and DKIM to verify an email\u2019s sender, and takes them a step further by adding the protocols for handling unauthorised emails. <\/span><a href=\"http:\/\/dkim.org\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">DKIM<\/span><\/a>&nbsp;<span style=\"font-weight: 400;\">(DomainKeys Identified Mail) is an authentication protocol that allows a sender to digitally sign an email with the organisation\u2019s domain name, ensuring the message\u2019s authenticity. <\/span><a href=\"https:\/\/dmarcian.com\/what-is-spf\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">SPF<\/span><\/a><span style=\"font-weight: 400;\"> (Sender Policy Framework) is an email validation protocol used to verify the legitimacy of a sender\u2019s domain by defining which IP addresses are allowed to send email from a specific domain.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">What is a DMARC record?<\/span><\/h2>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">A DMARC record is a text entry within the DNS record that tells anyone checking your email domain\u2019s policy after checking your SPF and DKIM status. DMARC will authenticate the email if either SPF or DKIM, or both pass.<\/span><\/p>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">The DMARC record also tells email servers to send XML reports back to the reporting email address listed in the DMARC record. These reports are useful for showing the sender how an email travels through the ecosystem, and identify who is using their email domain.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">What DMARC policies can be set?<\/span><\/h2>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">There are three DMARC policies:<\/span><\/p>\n<p style=\"font-weight: 400;\"><b>p=none<\/b><span style=\"font-weight: 400;\"> &#8211; monitors email traffic but doesn\u2019t take any action. This policy instructs ISPs receiving emails from a domain to send reports back to the sender. This enables organisations to understand who is sending email using their domain.<\/span><\/p>\n<p style=\"font-weight: 400;\"><b>p=quarantine<\/b><span style=\"font-weight: 400;\"> &#8211; unauthorised emails are sent to the spam folder.<\/span><\/p>\n<p style=\"font-weight: 400;\"><b>p=reject<\/b><span style=\"font-weight: 400;\"> &#8211; ensures that the unauthorised email is not delivered at all. p=reject is the ultimate goal of implementing DMARC on your domain, and is the point at which malicious, unauthorised emails are entirely removed.<\/span><\/p>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Best practice for implementing DMARC policies is to work up through the levels of policy as you understand more about your domain, improve SPF and DKIM authentication, and ensure overall compliance with DMARC before implementing the p=reject policy. Going too soon to p=reject could lead to legitimate emails being lost.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">Why is DMARC important?<\/span><\/h2>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Social engineering attacks in the shape of <\/span><a href=\"https:\/\/outofsite.biz\/cynance\/10-cyber-security-mistakes-to-avoid\/\"><span style=\"font-weight: 400;\">phishing emails<\/span><\/a><span style=\"font-weight: 400;\">, <\/span><a href=\"https:\/\/outofsite.biz\/cynance\/emotet-malware-is-a-gift-that-keeps-on-giving\/\"><span style=\"font-weight: 400;\">spam<\/span><\/a><span style=\"font-weight: 400;\">, and other malicious emails are an ever present threat for organisations of all sizes, and 90% of all cybersecurity attacks originate with an email. Large email providers (think Google, Microsoft, and others) have filters which make decisions about whether emails should be passed through to inboxes, but this is a very imprecise science, and they often get it wrong. DMARC helps email senders and receivers work together to better secure emails, protecting users and emails from malicious emails.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">Why you should get your domain DMARC protected<\/span><\/h2>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">As a domain owner, DMARC email authentication comes with many benefits, and ultimately no downsides.&nbsp;<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\"> It allows organisations to protect domains from being abused by attackers. With a full DMARC p=reject policy in place, attackers are not able to use the domain for phishing emails, brand abuse, scams, malware, or ransomware attacks. Ultimately this protects an organisation\u2019s reputation.<\/span><\/li><\/ol>\n<ol start=\"2\">\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\"> DMARC email authentication smooths the way for emails to make it through spam blockers, which is particularly important if you send any form of email newsletter or marketing email. More and more ISPs are adopting DMARC email authentication checks before accepting an email, and emails from non DMARC registered domains will often be blocked at this point.<\/span><\/li><\/ol>\n<ol start=\"3\">\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\"> DMARC email authentication is free to use.<\/span><\/li>\n<\/ol>\n<h2><span style=\"font-weight: 400;\">Will DMARC authentication stop all spam emails?<\/span><\/h2>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">In a word, no. DMARC authentication significantly reduces the amounts of spam and malicious email reaching users, but it can\u2019t stop them all.&nbsp;<\/span><\/p>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">DMARC email authentication only protects against direct domain spoofing. This means that DMARC stops the domain example.com from being spoofed by an attacker. However spammers are inventive, and will change small details in order to evade detection. DMARC does have an additional side benefit though as it forces attackers to use slightly more obvious changes, which are easier for users to recognise as spam.<\/span><\/p>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">For example:<\/span><\/p>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Network administrators have protected example.com under DMARC, and it can\u2019t be used in malicious emails. The attackers realise they can\u2019t use example.com, and start using ex4mple.com instead. DMARC will not detect malicious emails using this domain as ex4mple.com is not a protected domain.<\/span><\/p>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">DMARC also doesn\u2019t protect against display name abuse. Display name abuse is when at first glance, the email address seems legitimate &#8211; <\/span><a href=\"mailto:example@example.com\"><span style=\"font-weight: 400;\">example@example.com<\/span><\/a><span style=\"font-weight: 400;\">. It is only when a user hovers over the display name that they see that the sender is in fact <\/span><a href=\"mailto:example@ex4mple.com\"><span style=\"font-weight: 400;\">example@ex4mple.com<\/span><\/a><span style=\"font-weight: 400;\"> &#8211; a malicious attacker.<\/span><\/p>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Therefore the best email security policy for all organisations is to combine <\/span><a href=\"https:\/\/outofsite.biz\/cynance\/infrastructure-security\/network-security\/\"><span style=\"font-weight: 400;\">technical methods<\/span><\/a><span style=\"font-weight: 400;\">, including DMARC email authentication with continuing to ensure that all employees are able to recognise the signs of a <\/span><a href=\"https:\/\/outofsite.biz\/cynance\/10-cyber-security-mistakes-to-avoid\/\"><span style=\"font-weight: 400;\">phishing email<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Stay safe<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>The battle against phishing, spam, and malicious emails is never ending. 3.1 billion domain spoofing emails are sent every single day, forcing email provider filters to work extra hard to filter out malicious emails and prevent them from reaching inboxes. In this ongoing, multifaceted battle, DMARC email authentication is one way that every organisation can&hellip;<\/p>\n","protected":false},"author":10,"featured_media":7176,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18],"tags":[63,62],"_links":{"self":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/posts\/7173"}],"collection":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/comments?post=7173"}],"version-history":[{"count":0,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/posts\/7173\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/media\/7176"}],"wp:attachment":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/media?parent=7173"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/categories?post=7173"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/tags?post=7173"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}