cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
4761
Views
0
Helpful
1
Replies

DMARC?

Jason Meyer
Level 1
Level 1

Just listened to a 'security' podcast and they were talking (advertising) a new e-mail secuirty method called DMARC.

Any thoughts or interest in this from the Cisco community?

We currently use SPF records, have looked at DKIM but never deployed it.

When will e-mail be a secure communication method nativly?

Thanks

1 Reply 1

Jeronimo Orona
Level 1
Level 1

Hello Jason,

As you may know; DMARC, which stands for "Domain-based  Message Authentication,   Reporting & Conformance", is a technical  specification created by a   group of organizations that want to help  reduce the potential for   email-based abuse by solving a couple of  long-standing operational,   deployment, and reporting issues related to  email authentication   protocols.

DMARC standardizes how email receivers perform email authentication    using the well-known SPF and DKIM mechanisms. This means that senders    will experience consistent authentication results for their messages at    AOL, Gmail, Hotmail, Yahoo! and any other email receiver implementing    DMARC. We hope this will encourage senders to more broadly  authenticate   their outbound email which can make email a more reliable  way to   communicate

How Does DMARC Work?

A DMARC policy allows a sender to indicate that their emails are    protected by SPF and/or DKIM, and tells a receiver what to do if neither    of those authentication methods passes - such as junk or reject the    message. DMARC removes guesswork from the receiver's handling of these    failed messages, limiting or eliminating the user's exposure to    potentially fraudulent & harmful messages. DMARC also provides a way    for the email receiver to report back to the sender about messages   that  pass and/or fail DMARC evaluation.

Who Can Use DMARC?

DMARC policies are published in the public Domain Name System (DNS),    and available to everyone. It is the goal of DMARC.org to submit the    draft specification to the IETF so that it may begin the process of    becoming an official Internet Standard RFC - available to everyone for    reference, implementation, and improvement

Information about Cisco IronPort shipping releases including current features and compatibility tables are available at http://www.cisco.com in product release notes. Please contact your Cisco Sales Representative or Reseller regarding  features, RFC or standards that are not noted in release notes.  Cisco  Sales Engineers can escalate requests for new features to Cisco Product  Marketing.

Regards,

-Jerry Orona