Outlook.com enforces email security protocols

It's been just over a year since Google and Yahoo began enforcing email security requirements to combat spam and phishing. Now Microsoft is following suit, announcing similar requirements for incoming mail to the Outlook.com platform.

These changes reflect an ongoing shift in the email landscape, and any organization that sends email should take action to stay compliant and keep its messages delivering.

What policies are required?

All organizations:

• Implement SPF and DKIM policies to verify the sender's identity.
• Define a DMARC policy that uses SPF and DKIM.

Organizations sending at least 5,000 emails a day:

• Include a clear, one-click unsubscribe link in all promotional emails.
• Maintain a low spam rate (below 0.1% ideally, and never above 0.3%).

Microsoft's Outlook.com requirements mirror the approach Google and Yahoo took last year. When enforcement begins in May, non-compliant messages will be routed to users' Junk folders, and will eventually be rejected outright.

What should organizations do?

To avoid deliverability problems, make sure your SPF, DKIM, and DMARC records are accurate and that you're following sending best practices: compliant sender addresses, working unsubscribe links, and transparent mailing practices.

• Review SPF and DKIM records for all outgoing mail services.
• Set up DMARC to monitor deliverability reports.
• Gradually tighten your DMARC policy to quarantine and then reject to stop scammers from impersonating your domain.
• Confirm any bulk email includes a clear unsubscribe link.
• Monitor your spam rates to maintain a good sending reputation.

These changes from Google, Yahoo, and now Microsoft point to the growing importance of email security. Taking steps to comply will help protect your organization's reputation, improve deliverability, and keep your messages reaching recipient inboxes.

Macktez Domain Management handles domain and DNS settings to strengthen email and web security, reduce the risk of domain-based attacks, and verify the authenticity of your outbound messages. If you'd like to learn more, schedule a meeting or contact us for a written estimate.