Guidance

Email security standards

This guidance explains how you can apply common security standards in your organisation to secure email.

• From: Government Digital Service and Central Digital and Data Office
• Published: 19 February 2016
• Last updated: 15 March 2021
  Show all updates

  1. 15 March 2021

     Adding pages on the MTA-STS and TLS-RPT protocols

  2. 19 February 2016

     First published.

Documents

Using Domain-based Message Authentication, Reporting and Conformance (DMARC) in your organisation

HTML

Using DomainKeys Identified Mail (DKIM) in your organisation

HTML

Using Sender Policy Framework (SPF) in your organisation

HTML

Using Transport Layer Security (TLS) in your organisation

HTML

Using the Mail Transfer Agent Strict Transport Security (MTA-STS) protocol in your organisation

HTML

Using TLS Reporting (TLS-RPT) in your organisation

HTML

Details

Read this guidance to understand how Domain-based Message Authentication, Reporting & Conformance (DMARC), DomainKeys Identified Mail (DKIM), Sender Policy Framework (SPF) and Transport Layer Security (TLS) are used in email security.