Only One-Third of Agencies Are Using Anti-Spoofing Email Tool

Nextgov: Just one-third of federal agencies have adopted a major anti-spoofing tool one month before a Homeland Security Department deadline, according to an industry analysis.

Only about 10 percent of agencies have properly configured that system, known as DMARC, and structured it so malicious emails that spoof the agency’s email addresses will be quarantined or rejected outright by recipients, according to the analysis provided to Nextgov by the security firm ValiMail.

At that rate, it will be another year before all federal domains are compliant with the October Homeland Security directive, far past the Jan. 15 deadline, Dylan Tweney, ValiMail head of communications, said in an email.

Read article