Don’t return to sender: Make sure you have email security fit for 2024

With the recent news that Google and Yahoo are mandating a new set of security requirements for email delivery from February 2024, it’s more important than ever that you understand exactly how your email campaigns will be impacted. 

Luckily, for once it’s nice and clear, for senders mailing out more than 5,000 emails a day to Gmail addresses, Google will require a set of authentication measures to be met to ensure they get delivered to its inboxes. It’s expected Yahoo will follow suit. 

Put simply, failure to comply means emails sent to Gmail and Yahoo inboxes might not be delivered as expected or might be marked as spam. That’s a whole lot of Marketing campaigns, product update emails, and invoices that are not going to be received. 

Every cloud…

It might seem that these new security standards are here just to make our lives harder, or at least in the short term, give us more work to do as we set about configuring our email security accordingly. However, there is a reward at the end of it!

Obviously having your domains correctly configured and protected against impersonation is a reward in and of itself; not losing data, money or reputation damage, that’s all priceless. 

If you want an easy way to make sure your email-sending domains are ready come February 1, 2024, Red Sift makes it easy. 

Our free Investigate tool checks how you stack up with Google and Yahoo’s requirements and provides a visual breakdown of exactly what you need to action. It will take you less than a minute to check each of your email-sending services.

But the carrot at the end of the Google/Yahoo stick is that a fully DMARC secured email domain can also get a Verified Mark Certificate. This would allow you to display your trademarked logo in recipients’ inboxes alongside all the email you send. 

Email open rates are a challenge at the best of times. This is made worse during peak seasons like Black Friday and Christmas when businesses everywhere bombard consumer inboxes with the latest discounts and deals.

But BIMI could be the next big thing for unlocking email open rates for good. In research carried out with our partner Entrust, we found that showing a registered logo in the avatar slot of an email increased opens by a whopping 38%. Good news for marketers everywhere. 

What’s coming up in 2024?

We know we’re kicking off the year with the Google and Yahoo changes but there may well be more changes to come to the world of BIMI. 

Gmail was one of the first mailbox providers to support BIMI in 2021. Now, two years later, they are building upon that foundation and have announced that they’ve added a verified checkmark and an informative tooltip for senders who have BIMI deployed with a VMC. 

This verification will allow users to easily distinguish between a certified BIMI logo, and a fake Google Account profile icon, which can be easily abused by an attacker.

We’ll be hosting a webinar with our good friends over at Entrust to dive into this topic a little deeper so join us on the 17th of January to learn more. 

Secure your spot today!

PUBLISHED BY

Clare Holmes

14 Dec. 2023

SHARE ARTICLE:

Categories

Recent Posts

VIEW ALL
BEC

The threat of Business Email Compromise in US healthcare

Jack Lilley

Executive summary: Business Email Compromise is siphoning billions from U.S. healthcare by exploiting human trust instead of software flaws. Spoofed or hijacked messages authorize fraudulent payments, spark ransomware, and expose patient data—causing crippling financial, operational, and compliance damage. Deploying DMARC, MFA, and rigorous multi-person payment checks is now critical. 3 key takeaways Business Email…

Read more
Email

Cloudflare selects Red Sift as a preferred partner to provide DMARC and…

Rebecca Warren

AI-generated email attacks are rapidly growing in scale and sophistication, demanding stronger defenses from at-risk organizations. Starting today, Red Sift is excited to announce a new strategic partnership with Cloudflare, the leading connectivity cloud company, to deliver its market-leading email security application, Red Sift OnDMARC, to a broader global audience.  Today’s alignment enhances Cloudflare’s…

Read more
Cybersecurity

New Zealand moves to mandate DMARC enforcement

Jack Lilley

Executive summary: New Zealand’s Secure Government Email Framework mandates DMARC at p=reject—plus hard-fail SPF, universal DKIM, enforced MTA-STS, and TLS-RPT—by October 2025. The rules replace SEEMail, curb soaring phishing losses, and will affect every organization that emails the public sector. Key takeaways: The New Zealand Government has recently published the Secure Government Email (SGE) Common…

Read more
BEC

DMARC: The best ROI for your organization

Jack Lilley

Executive summary: Implementing DMARC delivers one of the clearest, fastest returns on investment in email security. By authenticating outgoing mail and blocking spoofed messages, DMARC cuts the direct costs of phishing and Business Email Compromise, safeguards brand reputation, and boosts deliverability—ultimately driving revenue and trimming operational workload. Key takeaways: Email is a critical communication tool for…

Read more