Email Security
Email security protects the systems, domains, messages, and people that use email. It combines domain authentication, encrypted transport, message protection, filtering, identity controls, and reporting so attackers cannot easily impersonate your organization or turn a message into account access.
itDefensive security and security operations | OpenSkills.info
Course pathWalk it in order
Look it upDip in anytime
Go furtherLeaves this page
Intro
Email Security
Email is a distributed messaging system. A message usually crosses networks and organizations before it reaches a mailbox. That reach makes email useful. It also means a receiver needs evidence before it trusts a message that claims to be from your domain.
Use this mental model: email security protects a chain of claims. A sender claims a domain. The message claims content. A receiving system claims to have delivered it. A person may then act on the message. Each claim needs a control that matches it.
Continue the course
This section is part of the paid course.
See pricing to subscribe, or log in if you already have access.
Where this skill leads
Relevant careers
See how this topic contributes to broader role-level skill maps.
Sources
- https://csrc.nist.gov/pubs/sp/800/177/r1/final
Supports
- Trustworthy email as complementary SMTP and DNS authentication, TLS transmission security, and S/MIME content-security controls
- Enterprise email administrators and security specialists as the operational audience
- SPF, DKIM, DMARC, TLS, certificate authentication, and S/MIME terminology
- https://www.rfc-editor.org/rfc/rfc7208.html
Supports
- SPF as DNS-published authorization for hosts that use an SMTP identity
- SPF evaluation as distinct from visible From identity
- https://www.rfc-editor.org/rfc/rfc6376.html
Supports
- DKIM as a domain-associated cryptographic signature and validation mechanism for email
- https://www.rfc-editor.org/rfc/rfc7489.html
Supports
- DMARC policy, reporting, SPF and DKIM domain authentication, and visible From alignment
- Receiver handling of authentication failures and domain-owner feedback
- DMARC limits for content analysis, display-name attacks, and visually similar domains
- https://www.cisa.gov/resources-tools/resources/phishing-postcard
Supports
- Phishing signs, prevention actions, and suspicious-message reporting