Report: White House Email Domains Poorly Protected from Fraud

Only one Executive Office of the President email domain has fully implemented DMARC, according to a new report.

If you want to stop email-based phishing, the Domain Message Authentication Reporting & Conformance (DMARC) protocol is a recognized tool for the job. According to DMARC.org its a tool being used by
nearly 200,000 organizations
to secure their email. But according to a report from the Global Cyber Alliance, its a tool thats not being used very effectively by the White House.
The Alliance surveyed the domains under the control of the Executive Office of the President (EOP) and found that only one - Max.gov - has implemented the protocol at the highest level, which protects most completely against delivery of spoofed email. Seven other domains, including whitehouse.gov and eop.gov have implemented the protocol at the lowest level, which includes only monitoring.
The other 18 domains under the offices control have not implemented any level of DMARC at all. This could be important for those in government and the general public because these government domains are frequent choices for spoofed addresses in phishing campaigns.
Last year, the US Department of Homeland Security mandated that all federal agencies implement DMARC. The Global Cyber Alliance report indicates that not all agencies have embraced the mandate. The private sector has not fully embraced DMARC, either: A recent survey by Agari Data shows that only 8% of businesses have implemented the protocol.
For more, read
here
,
here
, and
here
.
Join Dark Reading LIVE for an intensive Security Pro Summit at Interop IT X and learn from the industry’s most knowledgeable IT security experts. Check out the agenda
here
.Register with Promo Code DR200 and save $200.

Last News
▸ ArcSight prepares for future at user conference post HP acquisition. ◂ Discovered: 07/01/2025 Category: security	▸ Samsung Epic 4G: First To Use Media Hub ◂ Discovered: 07/01/2025 Category: security	▸ Many third-party software fails security tests ◂ Discovered: 07/01/2025 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
Report: White House Email Domains Poorly Protected from Fraud