Email Security

---

• some spoofing attacks can be mitigated by configuring authentication for email server systems
• works by publishing records on a DNS server that identify messaging servers authorized to send email for the domain

Concepts

• Sender Policy Framework (SPF)
• DomainKeys Identified Mail (DKIM)
• Domain-Based Message Authentication, Reporting, and Conformance (DMARC)
• Email Gateway
• Cousin Domains

Combination of All 3 (SPF, DKIM, DMARC)

• combined use of SPF, DKIM, and DMARC significantly enhances email security
  • makes it much more difficult for attackers to impersonate trusted domains
• they provide essential mechanisms that help:
  • verify the authenticity of emails
  • maintain the integrity of the email content
  • ensure the safe delivery of electronic communication