Get the details on how to securely implement DANE in Exchange Online, experts warn

Microsoft’s announcement is “helpful,” said David Shipley, who heads security training provider Beauceron Security and is the former director of strategic IT initiatives at the University of New Brunswick, “but only to the extent that people have a good track record and deliver on good performance.” ” . I’m confident that big brands like Microsoft will find the resources to do this, but it’s doubtful that all businesses, or even some small and medium-sized firms, will do so.”

He noted that many sites have not yet implemented other existing email security protocols. For example, only 59% of the top 1 million domains have the older SPF (Sender Policy Framework) protocol configured correctly, he said, citing article in DMARC Checker. And of the top 1,000, only 77% have the correct base SPF.

DANE won’t stop phishing, Shipley added, although “it could help reduce spoofing even further.”