Get the details right to safely deploy DANE in Exchange Online, experts warn

Microsoft’s announcement “is useful,” commented David Shipley, who runs security awareness training provider Beauceron Security and is the former director of strategic IT initiatives at the University of New Brunswick, “but only as long as people have good records and implement good records.” . I’m sure big brands like Microsoft will have the resources to do this, but it’s doubtful that all businesses, or even a fraction of SMBs, will.”

Many sites have yet to implement other existing email security protocols, he pointed out. For example, only 59 percent of the top 1 million domains have an older protocol, SPF (sender policy framework), validly configured, he said, citing an item in DMARC Checker. And of the Top 1,000, only 77% have the correct base SPF.

DANE won’t stop phishing, Shipley added, although it “might help further reduce spoofing.”