A Powershell script to help you validate your DKIM config in Office 365
One of our support engineers (not me, so let’s give credit where credit is due) wrote a script to help you, as a customer of Office 365, validate for DKIM configuration once you have enabled it in the...
View ArticleHow I personally use Outlook with Office 365
Sometimes people ask me how they should configure Outlook and Office 365 (Exchange Online Protection, or EOP) so they work together in the best way. This is tough for me to recommend because it depends...
View ArticleDMARC one year later, and what have we learned?
It has been one year since I posted that Office 365 now supports inbound DMARC verification. What do we see in terms of how much mail it blocks in production? Well, we’ve learned a lot of things; some...
View ArticleExchange Online is rolling out default DKIM-signing to everyone
If you are a customer of Office 365 (Exchange Online Protection, or EOP), you may have noticed, or will be noticing, that we are adding DKIM signatures to your outgoing email, even if you haven’t...
View ArticleThe common types of spear phish we see today
As 2015 draws near to a close, I thought I’d write a blog post about the type of spear phishes we are seeing lately against our customer base. This is not general brand phish like someone spoofing...
View ArticleEmail authentication should work out of the box and we should not rely upon...
This is going to be a long post. Sorry. I didn’t have time to write a shorter one. Who should be responsible for setting up email authentication records? For years, I have been discussing the virtues...
View ArticleOffice 365 is expanding its DKIM-signing to our consumer brands plus adding...
Here at Office365 and Hotmail/outlook.com, we are making some changes with regards to our DKIM-signing in both services. We believe in sender authentication, especially with regards to DKIM, and plan...
View ArticleI don’t mean to name and shame, but I will
A few months ago, I made the mistake of signing up for a webcast that opted me in to getting continuous communicates from them about upcoming online seminars. I was getting tired of all of these...
View ArticleCommon errors in SPF records
The other day I was asked to come up with some common errors that we see when people set up SPF records as we want to start notifying our customers when they have these types of errors. I thought it...
View ArticleHow antispoofing protection works in Office 365
Exchange Online Protection (EOP), the email filtering component of Office 365, is rolling out, or has already rolled out, full antispoof protection for all of its customers. Most of our customers...
View ArticleA Powershell script to help you validate your DKIM config in Office 365
One of our support engineers (not me, so let’s give credit where credit is due) wrote a script to help you, as a customer of Office 365, validate for DKIM configuration once you have enabled it in the...
View ArticleWhy study art?
I’ve got an unusual topic to discuss today – art history. You may be wondering “Um, why are you talking about art history on a blog about cybersecurity?” To which I reply “It’s my blog and I like...
View ArticleAbstract art and the Final Ultimate Solution to the Spam Problem
I think I finally thought of something relevant to cybersecurity and my last post on why we should study art. This may be a stretch, but read on and tell me what you think. Every once in a while, a...
View ArticleCan TLS make the user experience better?
This blog post reflects only my opinion about encryption and the protection of sensitive personal information. It is not reflective of anyone else’s views and is only how I interpret the state of the...
View ArticleWhat Gmail’s changes in their web interface means to you as a customer of...
A few weeks ago, Gmail made several changes to better reflect the security status of messages sending to its service. I am a user of Gmail and I appreciate what they are doing. If you’re a customer of...
View ArticleUnderstanding Safety Tips in Office 365
Exchange Online Protection (EOP) already protects you with industry-leading spam and malware prevention. However, these attacks are so well crafted that they look legitimate. Sometimes putting messages...
View ArticleOutlook.com DKIM signing done, now on to hotmail.com
A couple of months ago, I wrote a blog post that we were starting to roll out DKIM signing for our consumer email accounts sending from @outlook.com. These are for accounts that have been migrated from...
View ArticleTaking the hassle out of email authentication
Last month in Cologne, Germany, at the Certified Senders Alliance conference, I gave a presentation entitled “Taking the hassle out of email authentication.” Below is a slightly modified format of my...
View ArticleSeven things to know about Safety Tips
As I posted on this blog a couple of months ago, and as we posted on the Office blog last month, Office 365 is going to be releasing Safety Tips over the next few weeks. In this blog post, I go into...
View ArticleWhy does my email from Facebook, that I forward from my outlook.com account,...
Why is my (your) email bouncing when I (you) forward it? Recently, many people have been asking me why their email from Facebook, that they forward from their outlook.com or Hotmail account to another...
View Article