In an article for the Jericho Forum Outlook published by Network World (2008-01-15) Pauls Simmonds asks ten questions about E-mail and its security discontents:
- Do you have a strategy for securing e-mail?
- Is your e-mail server capable of SMTP/TLS in at least opportunistic mode?
- Can you support a request for forced SMTP/TLS?
- Have you updated your DNS to include your SPF records?
- Have you trained your people that sending Internet e-mail is like sending a postcard?
- Are you alerting your e-mail recipients when an external e-mail is not secure?
- Are you feeding SPF and SMTP/TLS attributes into your spam calculations?
- When using an (e-mail) marketing company and they spoof your e-mail domain – do you ensure the SPF is OK?
- Do you have processes to ensure content is secured when sending via the Internet?
- Does your DNS provider support the latest SPF standard?