US presidential candidates aren't using basic email security
Only one in 11 candidates uses DMARC to secure their email
New research has revealed that almost all of the upcoming 2020 presidential candidates in the US are falling behind when it comes to email security despite the fact that Hillary Clinton's email accounts were targeted and breached by Russian hackers just three years ago.
The email security company Agari confirmed that only the Democratic candidate Elizabeth Warren is using domain-based message authentication, reporting and conformance policy or DMARC to protect her email accounts.
This email security features resides on top of the Sender Policy Framework (SKF) and the DomainKeys Identified Mail (DKIM) security protocols which use cryptography to verify a sender's email and can mark emails as spam or reject them if an email fails to be properly validated.
- Banish those winter blues with email security
- Email security is greater threat than ever
- How to make your email more secure
According to Agari, the other 11 candidates whose email security it investigated, including Bernie Sanders, Joe Biden and presidential incumbent Donald Trump, do not use DMARC to security their campaign domains.
DMARC
By not using DMARC to secure their email accounts, Agari warned that the 2020 presidential candidates risk having their campaigns impersonated in spam campaigns and phishing attacks.
The company's Armen Najarian explained why using DMARC to secure one's email accounts has become increasingly important, saying:
“DMARC is more important than ever because if it had been implemented with the correct policy on the domain used to spearphish John Podesta, then he would have never received the targeted email attack from Russian operatives.”
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
There has been a slight rise in DMARC adoption by Fortune 500 companies since the beginning of this year. However, while most of the companies use DMARC, Agari said that only 16 percent of the 500 world's richest companies reject or quarantine unvalidated email.
Via TechCrunch
- We've also highlighted the best email providers
After working with the TechRadar Pro team for the last several years, Anthony is now the security and networking editor at Tom’s Guide where he covers everything from data breaches and ransomware gangs to the best way to cover your whole home or business with Wi-Fi. When not writing, you can find him tinkering with PCs and game consoles, managing cables and upgrading his smart home.