TrustYourInbox: What is DMARC?
Download as PPTX, PDF0 likes29 views
DMARC is a technical specification that enhances email authentication by building on SPF and DKIM, allowing email receivers to verify the identity of email messages. It provides domain owners with feedback about how their domains are being used, aiding accurate deployment of SPF and DKIM. The DMARC policy enforces different actions against unauthenticated emails, improving overall email security by combating fake emails.
TrustYourInbox: What is DMARC?
- 1. ©2020 TrustYourInbox, Inc. All Rights Reserved. Confidential and Proprietary TrustYourInbox Secure Your Brands Identity Dinesh Mistry Founder & CEO
- 2. ©2020 TrustYourInbox, Inc. All Rights Reserved. Confidential and Proprietary What Is DMARC? ● Technical Specification ● How to make email easy to identify using free and open technology ● Provides the ability for Email Receivers to consistently check the identity of an email message
- 3. ©2020 TrustYourInbox, Inc. All Rights Reserved. Confidential and Proprietary DMARC Builds On SPF & DKIM Two ways to identify Email Authentication ● Sender Policy Framework (SPF) ○ Where Email comes from ○ “Path Based” ● Domain Keys Identified Mail (DKIM) ○ Content of Email ○ “Signature Based”
- 4. ©2020 TrustYourInbox, Inc. All Rights Reserved. Confidential and Proprietary Authenticated Identifiers ● SPF & DKIM can associate a piece of email with a domain ● The stable, domain-level identifiers that SPF & DKIM produce are called “Authenticated Identifiers” ● DMARC ties together Authenticated Identifiers with the domain found in the FROM: header of an email
- 5. ©2020 TrustYourInbox, Inc. All Rights Reserved. Confidential and Proprietary DMARC Builds On SPF & DKIMHow To Accurately Deploy SPF & DKIM ● DMARC provides new feedback to domain owners ● Domain owners can now see how their domains are being used from the perspective of the receivers ● This makes accurate deployments of SPF and DMARC possible
- 6. ©2020 TrustYourInbox, Inc. All Rights Reserved. Confidential and Proprietary Forensic Report Notes (RUF) Forensic Reports are often not provided 1. Privacy Concerns 2. Potentially Very High Volumes 3. Reports not needed to deploy DMARC You have to explicitly ask for forensic reports, often not asked for to avoid potential privacy issues
- 7. ©2020 TrustYourInbox, Inc. All Rights Reserved. Confidential and Proprietary The DMARC Policy Receivers will enforce policy against unauthenticated email ● none – (Monitor Mode, No Enforcement) ● quarantine – Deliver to the “spam” folder ● reject – Do not deliver and discard email message . The “pct” tag allows for slow roll out . ● “pct=20” means apply policy to 20% of unauthenticated email ● If policy is NOT applied due to pct tag, “next lesser” policy is applied
- 8. ©2020 TrustYourInbox, Inc. All Rights Reserved. Confidential and Proprietary Big Improvement In Email Security With DMARC in place ● FAKE Email can be rejected ● Delivered is simplified ● Building blocks of email domain reputation