Attention Federal Agencies: DMARC is Not a Silver Bullet for Email Security

NextGov: As part of the government’s broader initiative to harden email security, federal agencies are scrambling to meet the Oct. 16 deadline established by the Homeland Security Department to implement the Domain-based Message Authentication, Reporting and Conformance protocol, known as DMARC. The binding operational directive issued nearly 12 months ago is intended to provide strong protections so that spoofed domains are rejected at the server.

The government’s decision to go all in on DMARC is practical in theory but confounding to many in security community who recognize the protocol as anything but a silver bullet for email security.

Read article