[dane] FYI: Cloudmark DANE support

Viktor Dukhovni <ietf-dane@dukhovni.org> Fri, 31 March 2017 04:36 UTC

Return-Path: <ietf-dane@dukhovni.org>
X-Original-To: dane@ietfa.amsl.com
Delivered-To: dane@ietfa.amsl.com
Received: from localhost (localhost []) by ietfa.amsl.com (Postfix) with ESMTP id EE39B127977 for <dane@ietfa.amsl.com>; Thu, 30 Mar 2017 21:36:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([]) by localhost (ietfa.amsl.com []) (amavisd-new, port 10024) with ESMTP id lHS14Yuyci-z for <dane@ietfa.amsl.com>; Thu, 30 Mar 2017 21:36:00 -0700 (PDT)
Received: from mournblade.imrryr.org (mournblade.imrryr.org []) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 00CC9129546 for <dane@ietf.org>; Thu, 30 Mar 2017 21:35:56 -0700 (PDT)
Received: from [] (cpe-74-71-8-253.nyc.res.rr.com []) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mournblade.imrryr.org (Postfix) with ESMTPSA id BC4537A32F1 for <dane@ietf.org>; Fri, 31 Mar 2017 04:35:55 +0000 (UTC) (envelope-from ietf-dane@dukhovni.org)
From: Viktor Dukhovni <ietf-dane@dukhovni.org>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Reply-To: IETF DANE Mailinglist <dane@ietf.org>
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
Message-Id: <2BDE206F-A032-4A5A-BA30-65A5F3AF7944@dukhovni.org>
Date: Fri, 31 Mar 2017 00:35:55 -0400
To: IETF DANE Mailinglist <dane@ietf.org>
X-Mailer: Apple Mail (2.3273)
Archived-At: <https://mailarchive.ietf.org/arch/msg/dane/uBh6k7bpxM8W8ydxEG4gPVNy03o>
Subject: [dane] FYI: Cloudmark DANE support
X-BeenThere: dane@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: DNS-based Authentication of Named Entities <dane.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dane>, <mailto:dane-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dane/>
List-Post: <mailto:dane@ietf.org>
List-Help: <mailto:dane-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dane>, <mailto:dane-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 31 Mar 2017 04:36:02 -0000



DANE and Email Security
Mon, 27 Mar 2017 Andrew Conway

The forthcoming Cloudmark Security Platform for Email 5.2 will
include support for DNS-Based Authentication of Named Entities
(DANE), a new protocol that enables increased security for email
communications. In this article we’ll look at how DANE works,
how it can contribute to a more secure email environment, and how
it is starting to gain acceptance.


DANE does not stop all possibility of email compromise, but it does
drastically reduce the surface for man in the middle attacks. By
including DANE in Cloudmark Security Platform for Email 5.2, we are
pleased to be able to contribute to more secure email communications
for our clients and their users.