Email Transport Security with Gareth Gudger
How do you secure your email transport? Richard talks to Gareth Gudger about the various additional protocols and approaches essential to transporting email. Gareth reminds us that SMTP, like the Internet, was not designed with security in mind, so we have to add layers to try and improve things. It is an acronym soup of SPF, DKIM, DMARC, MTA-STS, and DANE - but every acronym gets a definition! Sure, there is more to email security than just transport, but arguably, this is the place to start. And after that - focus on identity security!
RunAs Radio · Gareth Gudger, Richard Campbell
Audio is streamed directly from the publisher (cdn.simplecast.com) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.
Show Notes
How do you secure your email transport? Richard talks to Gareth Gudger about the various additional protocols and approaches essential to transporting email. Gareth reminds us that SMTP, like the Internet, was not designed with security in mind, so we have to add layers to try and improve things. It is an acronym soup of SPF, DKIM, DMARC, MTA-STS, and DANE - but every acronym gets a definition! Sure, there is more to email security than just transport, but arguably, this is the place to start. And after that - focus on identity security!
Links:
- Office 365 for IT Pros
- HAFNIUM Exploit
- MTA-STS for Exchange Online
- Email Encryption in M365
- Advanced Message Encryption
- M365 Maps
- SPF in M365
- Gareth's Blog
Recorded February 15, 2022