Collaborate Disseminate
I recently contacted a vendor of security-related development libraries to ask for a quote (I won’t name them yet).
The next day, Postmark sent me my weekly DMARC report – and it contained 2 failed entries originating from t… Continue reading Suspicious Entry in DMARC Report
I know that an emails’ sender can be verified e.g. through DKIM.
If I receive an email chain containing replies, forwards, etc. is there any way to verify the sender of other (earlier) emails in the chain?
SMTP Strict Transport Security is coming to major webmail providers this year, a Google engineer said at RSA Conference Continue reading SMTP Strict Transport Security Coming Soon to Gmail, Other Webmail Providers
I have got my SPF, DKIM & DMARC records correctly setup and I have started using a DMARC analysis service.
One thing I have noticed is the volume failures. For example, in the last 3 days I have had 16,000 without correc… Continue reading Are high levels of email spam normal?
I am looking for an email provider that I will use with custom domain, one provider is cheaper but has only SPF while the other is more expensive but uses both SPF and DKIM and I’m not sure if paying more is worth it if the o… Continue reading Security of SPF vs SPF and DKIM in email
Good Morning All, I’ve been thrown into the deep end with a request from my director. I know little of DMARC and email spoofing in general, but I’m trying to somehow weed out WHY this spoof email “passed”.
It’s coming from… Continue reading Why did spoof email receive a "pass"? And why didn’t it show up in the aggregate report?
Sammy the sender is sending email to Rita the recipient. I know Sammy will apply a DKIM signature to the email and Rita is going to check the DKIM signature with a DKIM validator. I am a malicious man-in-the-middle. I want… Continue reading How to create email that will fool DKIM verifier?
Sammy the sender is sending email to Rita the recipient. I know Sammy will apply a DKIM signature to the email and Rita is going to check the DKIM signature with a DKIM validator. I am a malicious man-in-the-middle. I want… Continue reading How to create email that will fool DKIM verifier?
An email scam tricked Yandex email recipients into thinking phishing emails were certified legit and from the Microsoft.com domain. Continue reading Office 365 Vulnerability Identified Bogus Microsoft.com Email as Valid
I understand that by publishing an initial p=none policy, you basically instruct recipients that participate in DMARC to NOT treat incoming mail any different than how they did before a DMARC policy was published.
Regardles… Continue reading On deploying DMARC