3D. Analyse email monitoring output obj 3.1

Question 1

What is DKIM?

Answer 1

DomainKeys Identified Mail
- allows orgs to add content to msg to identify them as being from their domain
- DKIM signs the msg body and elements of the header
- recipient uses senders public key, found on the sender’s DNS record, to verify the msg has not be altered during transit and has been sent from the sender’s domain

Question 2

What is SPF?

Answer 2

Sender Policy Framework
- Email authentication technique
- SPF records added to DNS records of org, which specify what systems are allowed to send email from that domain.
- Systems not listed in SPF are rejected
- SPF records in DNS limited to 255 characters, not good for orgs with many email servers

Question 3

What is DMARC?

Answer 3

Domain-based Message Authentication, Reporting, and Conformance
- Protocol that uses SPF and DKIM to determine if email is authentic
- specifies alignment mechanism to verify domain identified in the rule header field matches the domain in the envelope from field
- records published in DNS, but can also determine if org should accept msg from sender