Government Agencies Need Better Email Security

The Online Trust Alliance (OTA) has given government agencies and online retailers a failing grade in preventing deceptive email and phishing scams based on its recently released analysis of email authentication adoption.

While adoption has grown over the past year, OTA found 56 percent of the top .gov sites – including Whitehouse.gov, FBI.gov, Treasury.gov and DHS.gov – still are not protecting U.S. citizens through the use of email authentication. At the same time progress has been made by other government agencies including the Census Bureau, CIA, FDIC, VA and FTC.

The OTA also found that among the major online retailers 45 percent have not adopted email authentication- leaving brands, domains, and consumers exposed to security and privacy threats.

While the OTA recognizes many brands including Amazon, Dell, Office Depot, Apple, Costco and Staples have adopted increased online security measures, many others including Sears, Victoria’s Secret, Gap, and Nordstrom are failing to adequately protect their brands and customers via email authentication.

Many of the organizations and businesses that have failed to use some form of email authentication standards, including SPF/Sender ID or DomainKeys Identified Email (DKIM), have become victims of forged email and online exploits. Email authentication has been widely viewed as a best practice to help reduce deceptive email and phishing exploits.

“It is incomprehensible that in this period of escalating online scams and diminishing consumer confidence these agencies and businesses continue to sit on the sidelines,” said Craig Spiezle, OTA Chairman and Founder.

“Best practices not only need to be adopted by business, but also by governmental agencies. OTA members reiterate their willingness to provide resources and assistance to these organizations.”

Leave a Reply

You can use these XHTML tags: <a href="" title=""> <abbr title=""> <acronym title=""> <blockquote cite=""> <code> <em> <strong>