+APP.5.3.A9 Extended Security Safeguards on E-Mail Servers (S)

APP.5.3.A9 Extended Security Safeguards on E-Mail Servers (S)

An organisation's e-mail servers SHOULD check incoming e-mails using the Sender Policy Framework (SPF) and DomainKeys. The organisation SHOULD use DomainKeys and the SPF to authenticate e-mails it sends.

If SPF is used, it SHOULD be clearly specified how e-mails are to be handled. The softfail parameter ("~") SHOULD only be used for testing purposes.

The organisation SHOULD use Domain-based Message Authentication, Reporting and Conformance (DMARC) to specify how the e-mails it sends should be verified by the receiving e-mail server. DMARC reports SHOULD be evaluated regularly. The organisation SHOULD determine whether DMARC reports on received e-mails are sent to other organisations.

The organisation SHOULD secure its e-mail communications via DANE and MTA-STS.

1. Επισκόπηση

1.1 Παραπομπές

1.2 Εντοπισμένες απαιτήσεις

1.3 Σχετικοί κανονισμοί

2. Εντοπισμένες απαιτήσεις

Απαιτήσεις

3. Σχετικοί κανονισμοί

Κανονισμοί

Συνδεδεμένα ζητήματα

Συνδέσεις
blocks G 0.36 Identity theft
blocks G 0.42 Social Engineering