07-06-2012 09:12 AM
Just listened to a 'security' podcast and they were talking (advertising) a new e-mail secuirty method called DMARC.
Any thoughts or interest in this from the Cisco community?
We currently use SPF records, have looked at DKIM but never deployed it.
When will e-mail be a secure communication method nativly?
Thanks
07-12-2012 04:24 PM
Hello Jason,
As you may know; DMARC, which stands for "Domain-based Message Authentication, Reporting & Conformance", is a technical specification created by a group of organizations that want to help reduce the potential for email-based abuse by solving a couple of long-standing operational, deployment, and reporting issues related to email authentication protocols.
DMARC standardizes how email receivers perform email authentication using the well-known SPF and DKIM mechanisms. This means that senders will experience consistent authentication results for their messages at AOL, Gmail, Hotmail, Yahoo! and any other email receiver implementing DMARC. We hope this will encourage senders to more broadly authenticate their outbound email which can make email a more reliable way to communicate
How Does DMARC Work?
A DMARC policy allows a sender to indicate that their emails are protected by SPF and/or DKIM, and tells a receiver what to do if neither of those authentication methods passes - such as junk or reject the message. DMARC removes guesswork from the receiver's handling of these failed messages, limiting or eliminating the user's exposure to potentially fraudulent & harmful messages. DMARC also provides a way for the email receiver to report back to the sender about messages that pass and/or fail DMARC evaluation.
Who Can Use DMARC?
DMARC policies are published in the public Domain Name System (DNS), and available to everyone. It is the goal of DMARC.org to submit the draft specification to the IETF so that it may begin the process of becoming an official Internet Standard RFC - available to everyone for reference, implementation, and improvement
Information about Cisco IronPort shipping releases including current features and compatibility tables are available at http://www.cisco.com in product release notes. Please contact your Cisco Sales Representative or Reseller regarding features, RFC or standards that are not noted in release notes. Cisco Sales Engineers can escalate requests for new features to Cisco Product Marketing.
Regards,
-Jerry Orona
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide