Best Practice Detail
13-8-8906
Service Providers should authenticate all outbound email using DomainKeys Identified Mail (DKIM) and Sender Policy Framework (SPF). Authentication should be checked on inbound emails; DKIM signatures should be validated and SPF policies verified.
Status: Rollover New
References/Comments: See the following document for more information: http://www.maawg.org/sites/maawg/files/news/MAAWG_Email_Authentication_Paper_2008- 07.pdf More information can also be found at: http://www.dkim.org/ http://openspf.org Note that the Best Practices in this grouping are primarily aimed at ISPs that provide service to consumer end-users on residential broadband networks, but may be applicable to other users and networks as well.
Historical events:
- Service Providers
- Internet/Data
- Cyber Security
- Intrusion Detection
- CSRIC VII: Rollover New In CSRIC VII
