您是否知道网络犯罪分子可以轻松地使用您的域发送电子邮件？
一旦恶意电子邮件（带有您的域）进入收件人的收件箱，如果它们被打开，各种恶意软件可能会在他们的计算机和网络上释放。这会给他们和你带来很多问题。
那么你能做些什么呢？
Enter Domain-based Message Authentication, Reporting, and Conformance (aka DMARC). DMARC is an email authentication mechanism. It consists of two parts – a verification component and a policy component.
However, DMARC does not work alone. It requires two set of information from the authorised email server – the Sender Policy Framework (aka SPF) and Domain Key Identified Mail (aka DKIM). These three records residing at the Domain Name Server (aka DNS) will help email-receiving servers to determine the authenticity of the mail and how to handle the email thereafter (i.e. allowed the email to pass through, put into a spam or junk folder, or simply rejected it).
DMARC、SPF 和 DKIM 的技术实施具有多种商业优势，品牌和企业主应注意这些优势。
#1 防止电子邮件欺骗
It is easy to 发送带有虚假域名的电子邮件. This is due to the lack of an authentication mechanism in current mail servers. Cybercriminals are aware of this loophole and are taking advantage of it.
网络犯罪分子还知道，熟悉的电子邮件比陌生人的电子邮件更有可能被打开。信任您和您的品牌的客户和业务伙伴更有可能信任电子邮件及其内容，认为电子邮件是合法的。
DMARC, together with SPF and DKIM, blocks out cyber criminals’ email spoofing attempts through a system of verification and authentication. They ensure that only authenticated emails land in the inboxes.
#2 商业保护
If a fraudulent email is successful in its mission, and causes damage to another organisation, the victim company may seek legal redress from your company for “allowing” the incident to happen. Your company’s progress and productivity may be impacted as you get embroiled in a civil suit. If the matter is picked up by the press and make known. This could put a dent in your business as customers and associates might stay away for fear of being the next victim. Their may be financial and reputation impact, eventually affecting revenue.
#3 避免垃圾邮件/垃圾文件夹
Before deploying DMARC for your domain, receiving email servers have no way of authentication your emails. Hence, your emails may find a home in your recipient’s spam or junk folder.
部署 DMARC 后，电子邮件进入收件箱的机会就会更高。这对于交易性或重要电子邮件至关重要，因为您不希望它们进入垃圾邮件/垃圾文件夹。这可能会给接收方带来一些不便甚至混乱，导致您的品牌体验不佳。
#4 提高营销投资回报率
如果您正在开展营销活动，您希望您的电子邮件能够到达尽可能多的目标受众的收件箱。当您的营销电子邮件进入收件人的垃圾邮件箱时，它无助于您的营销工作。这会严重影响您的营销指标，预计投资回报率（又名投资回报率）较低。
通过 DMARC 与电子邮件营销最佳实践相结合，可以正确跟踪电子邮件性能，反映营销活动的真实投资回报率。
#5 避免被列入黑名单
随着垃圾邮件法的实施，互联网服务提供商（又名 ISP）和电子邮件服务提供商（又名 ESP）正在设置黑名单，以列出行为不端（即垃圾邮件）的域和 IP 地址。
群发邮件也会消耗宝贵的带宽。这给 ISP 带来了代价，因为他们必须购买更多带宽来容纳更多流量。就 ESP 而言，他们自己也不希望受到 ISP 的惩罚并被列入黑名单。因此，他们有自己的黑名单来淘汰不合规的客户。
一旦进入任何黑名单，可能需要数周甚至数月的时间才能从中删除。此外，如果您不够勤奋，无法快速将自己从黑名单中删除，您可能会很快被列入其他黑名单。这将对您的发件人分数和域声誉产生不利影响。
#7 更好的发件人分数
在金融界，有一个称为信用评分的评分系统。信用评分的目的是确定借款人的信用度。
Similarly, in the world of emails, there is a similar system called the sender score. Through this system, ESPs are able to determine whether your domain has a good or poor email track record. A number between 0 and 100 is assigned to domains. The higher the score a domain has, the better would be the preferential treatment by major mailbox providers. You want to have a sender score of more than 70.
互联网和电子邮件服务提供商依靠各种指标来确定域的声誉——发件人分数就是其中之一。它的重量很高。您不希望您的域具有较差的发件人分数。
#7 识别电子邮件发件人
如今，整个组织都在使用许多应用程序。您使用 CRM 进行销售，使用电子邮件营销系统和各种分析解决方案进行营销，使用票务支持系统帮助客户解决问题的客户支持等。为了更好地跟踪和报告，其中一些应用程序能够通过其应用程序发送电子邮件。
During a DMARC deployment, before a DMARC policy is enforced, DMARC can surface all IPs that are sending off emails with your domain. From there, you can white list certain IPs and blacklist any unauthorized IPs at work. Without DMARC, you are allowing nefarious elements to continue their malicious work.
From the above, the benefits of deploying a DMARC policy are overwhelming. If you need help with your DMARC deployment, do not hesitate to 联系我们.
