Modern Email Security
summary
Email causes most breaches: 100 billion messages daily, phishing with malicious URLs is rising, and a spoofed-looking internal mail gets a 70% click rate in tests. Practical defenses are SPF, DKIM and phased DMARC with reporting (move third‑party senders to subdomains, start at p=none, ramp quarantine/react percentages), plus STARTTLS mitigations, MTA-STS/TLS-RPT, ARC, DNSSEC, CAA and TLSA. Current state: only 16% SPF adoption and just 6% correct SPF among those domains.
AI-written summary · about
chapters (4)
related talks
44mSecurely Sending Email in 2024
47mHow to Detect Your Domains Being Abused for Phishing Using DNS
13mA Positive Security Talk
24mEnd-to-End Measurements of Email Spoofing Attacks
22mNot that Simple: Email Delivery in the 21st Century
47mSecure messaging - how to protect yourself & your company
40mWebsite security 101
20m"Return to Sender: Bypassing Email Spam & Malware Filters"