Category: Uncategorized

  • Email Security for unused email domains

    Organizations usually own a large number of email domains, for brand protection reasons. But only use a subset of those email domains for their mailboxes. Typically any email security measures are only applied to the email domains being used. This means the unused email domains can be at risk of being subject to cyber attack.…

  • Review Older TLS Versions and Cipher Suites

    TLS 1.3 is becoming prevalent across messaging platforms as we enter 2025. Exchange Online support for TLS 1.3 is due soon – see this TLS 1.3 Blog Post from office365migrate.com . Commonly TLS 1.2 is used as the default message transfer protocol, and this has superseded the previous versions of TLS which were TLS 1.0…

  • DANE DNSSEC for M365 Exchange Online

    Microsoft have released support for DANE and DNSSEC to improve the email security of your M365 registered email domains. DANE with DNSSEC will help protect your email domains against man-in-the-middle attacks. DANE stands for DNS-based Authentication of Named Entities, and is covered by RFC 6698 here https://datatracker.ietf.org/doc/html/rfc6698. It is recommended to enable the provided DANE…