Email was designed without any way to prove who sent a message. The From address that users see can be set to anything, which is why phishing and business email compromise so often impersonate trusted domains. Three complementary DNS-based standards fix much of this problem: Sender Policy Framework (SPF), DomainKeys Identified Mail (DKIM) and Domain-based Message Authentication, Reporting and Conformance (DMARC). Security+ expects you to know what each one checks, how they work together, and what they do not protect against.
Free account
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.