Internet Standards. Sam Silberman, Constant Contact
|
|
|
- Gabriel Douglas
- 10 years ago
- Views:
Transcription
1 Internet Standards Sam Silberman, Constant Contact
2 What are Standards?
3 World without Standards
4 We live in a connected world
5 Topics DMARC (Indirect flows) Security/Privacy TLS over SMTP End-to-end encryption SMTP over IPv6 Activities in the IETF APPSAWG
6 How does DMARC work? Organization publishes a DMARC policy on their domain P=none Participating ISPs sends the organization authentication and forensic reports Organization audits their outbound sending practices Centralizes outbound mail DKIM signs all outbound mail Publishes/updates SPF Repeat Only after exhaustive analysis, organization can enable DMARC p=reject
7 Who should enable DMARC? Large organizations who s brand (domain name) is used as part of a phishing scam. Banks (Bank of America, Amex) Popular brands (PayPal, Ebay, Amazon) Government agencies (IRS)
8 Who should not use DMARC? When individuals within the org need to send mail via indirect flows Mailing lists ESPs Proxy/forwarders Any organization where the mailbox owner requires to send mail via Indirect flows. Mailbox service providers (ISPs) Large corporations (no brand risk)
9 Proposed Mitigations Customer use non-dmarc hosted mailbox Proxy FROM address (Address re-write) FROM Sam Reply-To: Obtain permission to DKIM sign on behalf of ISP AOL.COM CS.COM AIM.COM Relay through domain owner s SMTP server
10 Proposed Mitigations "Delegating DKIM Signing Authority draft-kucherawy-dkim-delegate-01 (work in progress), June "DKIM Conditional Signatures draft-levine-dkim-conditional-00 (work in progress), June "A List-safe Canonicalization for DomainKeys Identified Mail (DKIM) draft-kucherawy-dkim-list-canon-00 (work in progress), June "Recognized Transformations of Messages Bearing DomainKeys Identified Mail (DKIM) Signatures draft-kucherawy-dkim-transform-00 (work in progress), April "Third-Party Authorization Label draft-otis-tpa-label-00 (work in progress), May Reference:
11 Security/Privacy Session (point to point) encryption TLS End-to-end encryption
12 Security/Privacy The DNS Based Authentication of Named Entities (DANE) Session (point to point) encryption TLS DANE Opportunistic TLS SMTP security via opportunistic DANE TLS draft-ietf-dane-smtp-with-dane-16 DANE published keys TLS Protocol using TLSA record in DNS RFC 6698 (was draft-ietf-dane-protocol)
13 Security/Privacy End to End Encryption Dane Using DANE to Associate OpenPGP public keys with addresses draft-ietf-dane-openpgpkey-03 Using Secure DNS to Associate Certificates with Domain Names For S/MIME draft-ietf-dane-smime-08
14 Security/Privacy End to End Encryption De facto standards (browser plug-ins) Google Yahoo
15 SMTP over IPv6 SMTP IPv6 to IPv4 Fallback Required authentication (best practice) Linkedin position Google s position entication_error&rd=1#authentication
16 Activities in the IETF APPSAWG Message Disposition Notification (updates for gateways and I18n) Message Header Field for Indicating Message Authentication Status draft-ietf-appsawg-rfc7001bis-07 Authentication Status Codes (SPF AND DKIM) RFC 7372 (was draft-ietf-appsawg- -auth-codes)
17 Next Steps Get Involved DMARC Speak up about indirect flows Propose solutions SMTP Encryption Implement Opportunistic TLS
18 Questions? Sam
Curbing Email Threats & Spear Phishing The Promise & Results with DMARC
SESSION ID: TECH-W03 Curbing Email Threats & Spear Phishing The Promise & Results with DMARC MODERATOR: Craig Spiezle Executive Director & President Online Trust Alliance @otalliance PANELISTS: Pat Peterson
DomainKeys Identified Mail (DKIM) Murray Kucherawy The Trusted Domain Project <[email protected]>
DomainKeys Identified Mail (DKIM) Murray Kucherawy The Trusted Domain Project PART ONE Origins Phishing was beginning to appear in earnest early in the last decade Spoofing was
Protect Outbound Mail with DMARC
MDaemon Messaging Server How To Quick Start Guide Protect Outbound Mail with DMARC To protect outbound mail from your domain, you will need to create a DMARC record for your domain. We recommend carefully
Protect your brand from phishing emails by implementing DMARC 1
Protect your brand from phishing emails by implementing DMARC 1 Message from the Certified Senders Alliance supported by AOL, Microsoft and Google In the following article we want to clarify why marketers
Introduction to the DANE Protocol
Introduction to the DANE Protocol ICANN 47 July 17, 2013 Internet Society Deploy360 Programme Providing real-world deployment info for IPv6, DNSSEC, routing and other Internet technologies: Case Studies
Email Security - DMARC ed Encryption
Email Security - DMARC ed Encryption non perdere tempo, non perdere dati e soprattutto evitare le trappole Cristiano Cafferata Claudia Parodi Mauro Cicognini
Versions Addressed: Microsoft Exchange 2003 Document Updated: March 25, 2015 Co nfidential Copyright 2015 Smarsh, Inc. All rights reserved.
Instructions for Configuring Microsoft Exchange 2003 For Outbound smarshdlp/encrypt Versions Addressed: Microsoft Exchange 2003 Document Updated: March 25, 2015 Co nfidential Copyright 2015 Smarsh, Inc.
How to Build an Effective Mail Server Defense
How to Build an Effective Mail Server Defense A multi-stage approach to securing your email communication August, 21 2006 Author: Alin Dobre, Head of Customer Support, AXIGEN GECAD Technologies 10A Dimitrie
BITS EMAIL SECURITY TOOLKIT:
BITS EMAIL SECURITY TOOLKIT: PROTOCOLS AND RECOMMENDATIONS FOR REDUCING THE RISKS A PUBLICATION OF THE BITS SECURITY AND RISK ASSESSMENT WORKING GROUP April 2007 BITS The Financial Services Roundtable
DANE Secured E-Mail Demonstration. Wes Hardaker Parsons <[email protected]>
DANE Secured E-Mail Demonstration Wes Hardaker Parsons Overview My Background In scope topics Securing E-Mail Requirements Implementing Each Requirement 2 My Background Part of the Network Security
Exim4U. Email Server Solution For Unix And Linux Systems
Email Server Solution For Unix And Linux Systems General Overview, Feature Comparison and Screen Shots Exim4U Email Server Solution For Unix And Linux Systems Version 2.x.x October 12, 2012 Copyright 2009
CS 356 Lecture 27 Internet Security Protocols. Spring 2013
CS 356 Lecture 27 Internet Security Protocols Spring 2013 Review Chapter 1: Basic Concepts and Terminology Chapter 2: Basic Cryptographic Tools Chapter 3 User Authentication Chapter 4 Access Control Lists
Dell SonicWALL Hosted Email Security. Administration Guide
Dell SonicWALL Hosted Email Security 2015 Dell Inc. ALL RIGHTS RESERVED. This guide contains proprietary information protected by copyright. The software described in this guide is furnished under a software
Spear Phishing. October 12, 2015 TLP: WHITE. www.excellium-services.com
Spear Phishing October 12, 2015 TLP: WHITE www.excellium-services.com Agenda How it s made Soo easy to find victims Inventory of evils documents The art of spoofing How to react to phishing Basics things
Exchange Online Protection In-Depth
Exchange Online Protection In-Depth Mike Crowley Baseline Technologies Session Agenda Introduction to EOP Administration DMARC, SPF & DKIM Advanced Threat Protection EOP Deployment Tips Introduction to
DMARC and your.bank Domain. September 2015 v
DMARC and your.bank Domain September 2015 v EMAIL MAKES IT EASY FOR CRIMINALS TO REACH YOUR CUSTOMERS USING YOUR BRAND Phishing and brand abuse erode consumer trust Attacks cause lasting brand damage Fallout
Features by Version. MDaemon Messaging Server Feature Guide. Alt-N Technologies
MDaemon Messaging Server Feature Guide Features by Version The following chart shows what version of MDaemon that new features where introduced in. CalDAV Support 15.5 Do Not Disturb 15.5 Email Encryption
DomainKeys Identified Mail DKIM authenticates senders, message content
DomainKeys Identified Mail DKIM authenticates senders, message content Alt-N Technologies, Ltd. 2201 East Lamar Blvd, Suite 270 Arlington, Texas 76006 Phone: (817) 525-2005 Fax: (817) 525-2019 http://www.altn.com/
A New Way For Emailers To Defend Themselves Against Email Fraud
June 27, 2012 Defining DMARC A New Way For Emailers To Defend Themselves Against Email Fraud by Shar VanBoskirk with Sarah Glass and Elizabeth Komar Why Read This Report Hundreds of brands are hijacked
Reliable & Secure Email. Professional, Dependable, Complete Easy to Learn, Use and Grow
Reliable & Secure Email Professional, Dependable, Complete Easy to Learn, Use and Grow About this Presentation Summarizes primary purposes of email, plus the needs of email providers and users. Introduces
Anti-Phishing Best Practices for ISPs and Mailbox Providers
Anti-Phishing Best Practices for ISPs and Mailbox Providers Version 2.01, June 2015 A document jointly produced by the Messaging, Malware and Mobile Anti-Abuse Working Group (M 3 AAWG) and the Anti-Phishing
One year of DANE Tales and Lessons Learned. sys4.de
One year of DANE Tales and Lessons Learned sys4.de DANE secures Security Why secure Security? Encryption Models Opportunistic Encryption > Expect anything > Proceed if absent > Try if offered > Proceed
The What, Why, and How of Email Authentication
The What, Why, and How of Email Authentication by Ellen Siegel: Director of Technology and Standards, Constant Contact There has been much discussion lately in the media, in blogs, and at trade conferences
Objective This howto demonstrates and explains the different mechanisms for fending off unwanted spam e-mail.
Collax Spam Filter Howto This howto describes the configuration of the spam filter on a Collax server. Requirements Collax Business Server Collax Groupware Suite Collax Security Gateway Collax Platform
MDaemon Vs. Microsoft Exchange Server 2013 Standard
Comparison Guide Vs. The following chart is a side-by-side feature comparison of and. Flex Licensing Maximum Accounts Unlimited Unlimited SMTP, POP3, DomainPOP, and MultiPOP POP3 & SMTP Only SSL / TLS
SESA Securing Email with Cisco Email Security Appliance Parts 1 and 2
Course Overview Securing Email with Cisco Email Security Appliance (SESA) combines Parts 1 and 2 (SESA1, SESA2) into a single three day course. Students learn to use Cisco Email Security Appliances (ESA's)
Email AntiSpam. Administrator Guide and Spam Manager Deployment Guide
Email AntiSpam Administrator Guide and Spam Manager Deployment Guide AntiSpam Administration and Spam Manager Deployment Guide Documentation version: 1.0 Legal Notice Legal Notice Copyright 2013 Symantec
The basic groups of components are described below. Fig X- 1 shows the relationship between components on a network.
Elements of Email Email Components There are a number of software components used to produce, send and transfer email. These components can be broken down as clients or servers, although some components
DMARC. How. is Saving Email. The New Authentication Standard Putting an End to Email Abuse
Messaging Masters Series How DMARC is Saving Email The New Authentication Standard Putting an End to Email Abuse by Alec Peterson, CTO, Message Systems, and Mike Hillyer, Senior Director, Global Solution
This user guide provides guidelines and recommendations for setting up your business s domain authentication to improve your deliverability rating.
BLUEHORNET USER GUIDE EMAIL AUTHENTICATION AND DOMAIN MONITORING TOOLS This user guide provides guidelines and recommendations for setting up your business s domain authentication to improve your deliverability
DKIM last chance for mail service? TFMC2 01/2006
DKIM last chance for mail service? TFMC2 01/2006 Mail service status More and more spam, fishing, spoofing, virus More and more energy in spam fighting More and more messages lost because : Imperfect automatic
Next Steps In Accelerating DNSSEC Deployment
Next Steps In Accelerating DNSSEC Deployment Dan York, CISSP Senior Content Strategist, Internet Society DNSSEC Deployment Workshop, ICANN 45 Toronto, Canada October 17, 2012 Internet Society Deploy360
DNSSEC - Why Network Operators Should Care And How To Accelerate Deployment
DNSSEC - Why Network Operators Should Care And How To Accelerate Deployment Dan York, CISSP Senior Content Strategist, Internet Society Eurasia Network Operators' Group (ENOG) 4 Moscow, Russia October
Trust in Email Begins with Authentication
Abstract Trust in Email Begins with Authentication Issued by the Messaging Anti-Abuse Working Group (MAAWG) March 2008 Edited by Dave Crocker Brandenburg InternetWorking The Internet s growth allows us
Emails and anti-spam Page 1
Emails and anti-spam Page 1 As the spammers become increasing aggressive more and more legit emails get banned as spam. When you send emails from your webcrm system, we use the webcrm servers to send emails
DMA s E-Mail Authentication Requirement: FAQs and Best Practices
DMA s E-Mail Authentication Requirement: FAQs and Best Practices DMA s Board of Directors approved a new guideline for ethical marketing practices in October 2005, with the new member requirement going
Email. Daniel Zappala. CS 460 Computer Networking Brigham Young University
Email Daniel Zappala CS 460 Computer Networking Brigham Young University How Email Works 3/25 Major Components user agents POP, IMAP, or HTTP to exchange mail mail transfer agents (MTAs) mailbox to hold
IronPort Email Authentication
IronPort Email Authentication W h i t e P a p e r Executive Summary The problems of spam, viruses, phishing and most email denial-of-service attacks can all be traced back to a single common cause lack
Email Marketing Glossary of Terms
Email Marketing Glossary of Terms A/B Testing: A method of testing in which a small, random sample of an email list is split in two. One email is sent to the list A and another modified email is sent to
9236245 Issue 2EN. Nokia and Nokia Connecting People are registered trademarks of Nokia Corporation
9236245 Issue 2EN Nokia and Nokia Connecting People are registered trademarks of Nokia Corporation Nokia 9300 Configuring connection settings Legal Notice Copyright Nokia 2005. All rights reserved. Reproduction,
Be up against the UTM Dedicated Content Security solutions from Cisco
Be up against the UTM Dedicated Content from Cisco Istvan Segyik Systems Engineer CCIE Security #47531 Cisco Global Virtual Engineering (GVE) Topics E-mail threats A few things to do for safer e-mail with
Tutorial Details Product Demonstrated: X-301 Estimated Completion Time: 15 minutes
How to Setup Email Notifications on ControlByWeb products Tutorial Details Product Demonstrated: X-301 Estimated Completion Time: 15 minutes Getting the Message ControlByWeb products can generate email
eprism Email Security Appliance 6.0 Intercept Anti-Spam Quick Start Guide
eprism Email Security Appliance 6.0 Intercept Anti-Spam Quick Start Guide This guide is designed to help the administrator configure the eprism Intercept Anti-Spam engine to provide a strong spam protection
Access Webmail, Collaboration Tools, and Sync Mobile Devices from Anywhere
P a g e 1 Steadfast email Steadfast email delivers Exchange-level mail server features at a lower cost. With lower end user requirements, superior stability, and reduced maintenance costs Steadfast email
Migrating to.bank A step-by-step roadmap for migrating to.bank
Migrating to.bank A step-by-step roadmap for migrating to.bank 11/19/2015 Advanced.BANK Webinar for ICBA Members 1 Webinar Presenters Craig Schwartz ftld Registry Managing Director Managing.BANK and.insurance
THE COMPLETE GUIDE TO GOOGLE APPS SECURITY. Building a comprehensive Google Apps security plan
THE COMPLETE GUIDE TO GOOGLE APPS SECURITY Building a comprehensive Google Apps security plan Contents Introduction................................ 3 1. Secure the core.............................4 Google
DKIM Enabled Two Factor Authenticated Secure Mail Client
DKIM Enabled Two Factor Authenticated Secure Mail Client Saritha P, Nitty Sarah Alex M.Tech Student[Software Engineering], New Horizon College of Engineering, Bangalore, India Sr. Asst Prof, Department
SCORECARD EMAIL MARKETING. Find Out How Much You Are Really Getting Out of Your Email Marketing
EMAIL MARKETING SCORECARD Find Out How Much You Are Really Getting Out of Your Email Marketing This guide is designed to help you self-assess your email sending activities. There are two ways to render
Email Migration Project Plan for Cisco Cloud Email Security
Sales Tool Email Migration Project Plan for Cisco Cloud Email Security 2014 Cisco and/or its affiliates. All rights reserv ed. This document is Cisco Conf idential. For Channel Partner use only. Not f
THE DMARC GUIDE. Understanding DMARC for Securing Email
THE DMARC GUIDE Understanding DMARC for Securing Email The History - Introduction Email despite its importance, ubiquity, and staying power has never been secure. Prior attempts at security have failed
DRAFT NIST Special Publication 800-177 Trustworthy Email
1 2 DRAFT NIST Special Publication 800-177 3 4 5 6 7 8 9 10 11 Ramaswamy Chandramouli Simson Garfinkel Stephen Nightingale Scott Rose 12 13 14 15 16 17 18 19 20 21 C O M P U T E R S E C U R I T Y 22 23
Protecting Your Zimbra Collaboration Environment. Zimbra Security and Privacy White Paper
Protecting Your Zimbra Collaboration Environment Zimbra Security and Privacy White Paper Table of Contents The Zimbra Approach to Security and Data Privacy Open Source Commitment Adherence to Open Standards
Email Authentication Policy and Deployment Strategy for Financial Services Firms
Email Authentication Policy and Deployment Strategy for Financial Services Firms A PUBLICATION OF THE BITS SECURITY PROGRAM February 2013 BITS/The Financial Services Roundtable 1001 Pennsylvania Avenue
Proxies. Chapter 4. Network & Security Gildas Avoine
Proxies Chapter 4 Network & Security Gildas Avoine SUMMARY OF CHAPTER 4 Generalities Forward Proxies Reverse Proxies Open Proxies Conclusion GENERALITIES Generalities Forward Proxies Reverse Proxies Open
Neither Snow Nor Rain Nor MITM... An Empirical Analysis of Email Delivery Security
Neither Snow Nor Rain Nor MITM... An Empirical Analysis of Email Delivery Security Zakir Durumeric, David Adrian, Ariana Mirian, James Kasten, Kurt Thomas, Vijay Eranti, Nicholas Lidzborski, Elie Bursztein,
Message Authentication Signature Standards (MASS) BOF. Jim Fenton <[email protected]> Nathaniel Borenstein <[email protected]>
Message Authentication Signature Standards (MASS) BOF Jim Fenton Nathaniel Borenstein Agenda Introductions and Agenda Bashing (10 min) Scribe?? Overview of existing
provides several new features and enhancements, and resolves several issues reported by WatchGuard customers.
WatchGuard XCS v10.0 Update 1 Release Notes WatchGuard XCS Build 140312 Revision Date 11 November, 2014 Introduction WatchGuard is pleased to announce the release of WatchGuard XCS v10.0 Update 1. This
Hosted Email Security 2.0 Quick Start Guide
Hosted Email Security 2.0 Quick Start Guide 1 Notes, Cautions, and Warnings NOTE: A NOTE indicates important information that helps you make better use of your system. CAUTION: A CAUTION indicates potential
How emails are sent from Xero
How emails are sent from Xero Technical discussion In June 2013 we made a change to the way emails are sent from Xero. Some of our users have asked us why the change was necessary and whether we are planning
Deploying DNSSEC: From End-Customer To Content
Deploying DNSSEC: From End-Customer To Content March 28, 2013 www.internetsociety.org Our Panel Moderator: Dan York, Senior Content Strategist, Internet Society Panelists: Sanjeev Gupta, Principal Technical
Microsoft Exchange 2003
Microsoft Exchange 2003 Configuration Guide Microsoft Exchange 2003 Configuration Guide Page 1 Table of Contents Introduction... 2 Document and naming conventions... 2 Outbound email protection... 3 SMTP
How To Ensure Your Email Is Delivered
Everything You Need to Know About Delivering Email through Your Web Application SECTION 1 The Most Important Fact about Email: Delivery is Never Guaranteed Email is the backbone of the social web, making
Spam, Spam and More Spam. Spammers: Cost to send
Spam, Spam and More Spam cs5480/cs6480 Matthew J. Probst *with some slides/graphics adapted from J.F Kurose and K.W. Ross Spammers: Cost to send Assuming a $10/mo dialup account: 13.4 million messages
DANE for SMTP. Viktor Dukhovni & Wes Hardaker. IETF 87, Berlin July 2013
DANE for SMTP Viktor Dukhovni & Wes Hardaker IETF 87, Berlin July 2013 1 Addresses in SMTP is security agnostic: SMTP with and without TLS runs over port 25 There is no URI scheme
March 2005. PGP White Paper. Transport Layer Security (TLS) & Encryption: Complementary Security Tools
March 2005 PGP White Paper Transport Layer Security (TLS) & Encryption: Complementary Security Tools PGP White Paper TLS & Encryption 1 Table of Contents INTRODUCTION... 2 HISTORY OF TRANSPORT LAYER SECURITY...
WHITEPAPER. SendGrid Deliverability Guide V2. Everything You Need to Know About Delivering Email through Your Web Application
WHITEPAPER SendGrid Deliverability Guide V2 Everything You Need to Know About Delivering Email through Your Web Application The Most Important Fact about Email: Delivery is Never Guaranteed Email is the
Eloqua Enhanced Branding and Deliverability More emails to the inbox means more opportunities and revenue.
Eloqua Enhanced Branding and Deliverability More emails to the inbox means more opportunities and revenue. Product Description In order to provide the best possible deliverability tool set, Eloqua has
DomainKeys Identified Mail (DKIM): Using Digital Signatures for Domain Verification
DomainKeys Identified Mail (DKIM): Using Digital Signatures for Domain Verification Barry Leiba IBM Research Hawthorne, NY [email protected] Jim Fenton Cisco San Jose, CA [email protected] ABSTRACT Email
Guardian Digital Secure Mail Suite Quick Start Guide
Guardian Digital Secure Mail Suite Quick Start Guide Copyright c 2004 Guardian Digital, Inc. Contents 1 Introduction 1 2 Contacting Guardian Digital 2 3 Purpose of This Document 3 3.1 Terminology...............................
Configuration Information
Configuration Information Email Security Gateway Version 7.7 This chapter describes some basic Email Security Gateway configuration settings, some of which can be set in the first-time Configuration Wizard.
SPAM, VIRUSES AND PHISHING, OH MY! Michael Starks, CISSP, CISA ISSA Fellow 10/08/2015
SPAM, VIRUSES AND PHISHING, OH MY! Michael Starks, CISSP, CISA ISSA Fellow 10/08/2015 The Usual Players Indebtedness for driving on toll road Transaction receipts Notice to appear Major and Emerging Trends
Marketer s Field Guide to Gmail, Outlook.com, and Yahoo!
Marketer s Field Guide to Gmail,, and Yahoo! Thanks to better ways to filter and block spam, inboxes are nearly free of unwanted mail, but not without a price. According to past Return Path studies, permissioned
How To Secure Mail Delivery
FortiMail Identity Based Encryption A Business Enabler WHITE PAPER FORTINET FortiMail Identity Based Encryption - A Business Enabler PAGE 2 Contents Business Need Secure Mail Delivery... 3 Challenges with
E-Mail Security. Raj Jain. Washington University in St. Louis
E-Mail Security Raj Jain Washington University in Saint Louis Saint Louis, MO 63130 [email protected] Audio/Video recordings of this lecture are available at: http://www.cse.wustl.edu/~jain/cse571-07/
Comprehensive Email Filtering. Whitepaper
Comprehensive Email Filtering Whitepaper Email has undoubtedly become a valued communications tool among organizations worldwide. With frequent virus attacks and the alarming influx of spam, email loses
Clearswift Information Governance
Clearswift Information Governance Implementing the CLEARSWIFT SECURE Encryption Portal on the CLEARSWIFT SECURE Email Gateway Version 1.10 02/09/13 Contents 1 Introduction... 3 2 How it Works... 4 3 Configuration
Top 10 Features: Clearswift SECURE Email Gateway
Top 10 Features: Clearswift SECURE Email Gateway Top 10 Features: Clearswift SECURE Email Gateway Modern business simply couldn t function without email. However, both incoming and outgoing messages can
2014-10-07. Email security
Email security Simple Mail Transfer Protocol First defined in RFC821 (1982), later updated in RFC 2821 (2001) and most recently in RFC5321 (Oct 2008) Communication involves two hosts SMTP Client SMTP Server