
Learn how DMARC, SPF, and DKIM authenticate emails and prevent spoofing. Explore email headers, conformance reporting, and outbound implementation to protect your organization and customers.
Explain how SPF uses a DNS TXT record to authorize sending hosts and IPs, include third parties, and apply hard or soft fail, plus authentication and alignment tests.
Explore how DKIM uses a public–private key pair and DNS records to sign outbound mail, enabling authentication and alignment checks that improve deliverability and authenticity, with noted limitations.
Implement a DMARC system by coordinating SPF and DKIM, publishing DNS TXT records, and using aggregate and forensic reports to monitor and enforce policies from none to quarantine to reject.
Explore DMARC fundamentals by learning to recognize and defend against email attacks—phishing, spear phishing, and business email compromise—and mitigate credential stuffing with multifactor authentication to prevent account takeover.
Email is a vital communication medium that is used by every business around the globe. Email is also one of the primary attack vectors that can introduce malware, ransomware and other malicious code into your environment. These attacks can come in many forms including email spoofing.
DMARC is designed to help mitigate this risk and ensure that spoofing your company domain is identified and blocked, including communication targeted at your organization or customers.
DMARC standards for Domain Based Message Authentication, Reporting and Conformance. DMARC utilizes both SPF and DKIM in order to make a determination on how to handle email that is coming inbound to your organization as well as messages that are sent outbound from your domain.
SPF stands for sender policy framework, and this specifies the servers that are allowed to send email on your behalf.
DKIM is an acronym for Domain Keys Identified Mail. This allows your mail server to digitally sign each message that is sent out from your domain. The recipient can then verify that the email was sent from your server and has not been altered in transit.
This course will help you understand the fundamental concepts of these three protocols and how they work in conjunction with each other to help mitigate the risk of email spoofing from your domain.