SPF, DKIM and DMARC: What Each One Actually Proves
Three controls, three different jobs. What SPF, DKIM and DMARC each prove, where each one fails, and why only alignment ties any of it to your name.
TOPIC
Threats & Incidents
How attacks actually unfold (phishing, ransomware, the unglamorous rest) and how to respond without theatrics.
Articles
Key terms
Fraud that uses a trusted email identity, forged or genuinely compromised, to make a legitimate employee authorize a payment or hand over data.
Forging the sender identity on an email so it appears to come from a trusted domain or person, which base email does nothing to prevent.
Fraudulent messages that impersonate a trusted party to trick people into revealing credentials, paying money, or running malware.
Malware that encrypts or steals data and demands payment for its return, increasingly paired with the threat of public leaks.