What is LetsDMARC?
LetsDMARC is an email authentication portal. It is designed to give email domain owners the ability to protect their domain from unauthorized use, commonly known as email spoofing. The purpose and primary outcome of implementing DMARC are to protect a domain from being used in business email compromise attacks, phishing emails, email scams, and other cyber threat activities.
How does DMARC work?
For DMARC to work, it requires DKIM or SPF to be in place in your email domain and a DMARC record to be published in your DNS.
Once the DMARC DNS entry is published, any receiving email server can authenticate the incoming email based on the instructions published by the domain owner within the DNS entry. If the email passes the alignment, it will be delivered and can be trusted. If the email fails the check, depending on the instructions held within the DMARC record the email could be delivered, quarantined, or rejected.
Why do I need DMARC if I’ve already got SPF and/or DKIM in place?
Well, you may think that with SPF or DKIM in place, you’re confident about the origin and content of emails you receive. Not so.
The goal of DMARC is to address the main problem with DKIM and SPF authentication: they don’t provide any validation to the From address, which is what humans typically see on email clients.
That’s what is called Identifier alignment which is the core of DMARC. It refers to the relationship between SPF and DKIM domain and From address domain so it needs to be aligned to be valid.
For this reason, a valid (but unaligned) DKIM and SPF email could result in a DMARC fail.
Domain usage monitoring
Another advantage from publish a DMARC record is the ability to monitor your domain usage on the internet. Gathering information from all email servers around the world will let you aware of who is an attempt to use your domain, and usually also your brand, illegally and put in place countermeasures
Why do you need LetsDMARC?
LetsDMARC service is an important defense to protect your business against phishing attacks, domain spoofing, email scams, and other cyber threats. It allows email receivers to authenticate, report on and enforce policy around emails sent from domain names they don’t control. Having LetsDMARC in your organization will help you to increase transparency in the emails you send. It provides full insight into email channels and makes phishing attacks visible.
DMARC plays an important role in email security as it reduces an attacker’s ability to get email threats to the end-user mailbox. With DMARC in your organization, you can create a record of who is authorized to send emails from their domain.