Don’t return to sender: Make sure you have email security fit for 2024

With the recent news that Google and Yahoo are mandating a new set of security requirements for email delivery from February 2024, it’s more important than ever that you understand exactly how your email campaigns will be impacted. 

Luckily, for once it’s nice and clear, for senders mailing out more than 5,000 emails a day to Gmail addresses, Google will require a set of authentication measures to be met to ensure they get delivered to its inboxes. It’s expected Yahoo will follow suit. 

Put simply, failure to comply means emails sent to Gmail and Yahoo inboxes might not be delivered as expected or might be marked as spam. That’s a whole lot of Marketing campaigns, product update emails, and invoices that are not going to be received. 

Every cloud…

It might seem that these new security standards are here just to make our lives harder, or at least in the short term, give us more work to do as we set about configuring our email security accordingly. However, there is a reward at the end of it!

Obviously having your domains correctly configured and protected against impersonation is a reward in and of itself; not losing data, money or reputation damage, that’s all priceless. 

If you want an easy way to make sure your email-sending domains are ready come February 1, 2024, Red Sift makes it easy. 

Our free Investigate tool checks how you stack up with Google and Yahoo’s requirements and provides a visual breakdown of exactly what you need to action. It will take you less than a minute to check each of your email-sending services.

But the carrot at the end of the Google/Yahoo stick is that a fully DMARC secured email domain can also get a Verified Mark Certificate. This would allow you to display your trademarked logo in recipients’ inboxes alongside all the email you send. 

Email open rates are a challenge at the best of times. This is made worse during peak seasons like Black Friday and Christmas when businesses everywhere bombard consumer inboxes with the latest discounts and deals.

But BIMI could be the next big thing for unlocking email open rates for good. In research carried out with our partner Entrust, we found that showing a registered logo in the avatar slot of an email increased opens by a whopping 38%. Good news for marketers everywhere. 

What’s coming up in 2024?

We know we’re kicking off the year with the Google and Yahoo changes but there may well be more changes to come to the world of BIMI. 

Gmail was one of the first mailbox providers to support BIMI in 2021. Now, two years later, they are building upon that foundation and have announced that they’ve added a verified checkmark and an informative tooltip for senders who have BIMI deployed with a VMC. 

This verification will allow users to easily distinguish between a certified BIMI logo, and a fake Google Account profile icon, which can be easily abused by an attacker.

We’ll be hosting a webinar with our good friends over at Entrust to dive into this topic a little deeper so join us on the 17th of January to learn more. 

Secure your spot today!

PUBLISHED BY

Clare Holmes

14 Dec. 2023

SHARE ARTICLE:

Categories

Recent Posts

VIEW ALL
ASM

Red Sift ASM & Red Sift Certificates: the missing link in your…

Billy McDiarmid

According to Gartner, Attack Surface Management (ASM) refers to the “processes, technology and managed services deployed to discover internet-facing enterprise assets and systems and associated exposures which include misconfigured public cloud services and servers.” This broad category of tooling is used within Continuous Threat Exposure Management (CTEM) programs, with many vendors within it having…

Read more
Email

The best tools to protect yourself from SubdoMailing

Francesca Rünger-Field

In late February 2024, ‘SubdoMailing’ became a trending search term overnight. Research by Guardio Labs uncovered a massive-scale phishing campaign that had been going on since at least 2022. At the time of reporting, the campaign had sent 5 million emails a day from more than 8,000 compromised domains and 13,000 subdomains with several…

Read more
Product Release

Red Sift’s Spring 2024 Quarterly Product Release

Francesca Rünger-Field

This early into 2024, the cybersecurity space is already buzzing with activity. Emerging standards, such as Google and Yahoo’s bulk sender requirements, mark a new era of compliance for businesses reliant on email communication. At the same time, the prevalence of sophisticated cyber threats, such as the SubdoMailing campaign, emphasizes the continual hurdles posed…

Read more
Email

Navigating the “SubdoMailing” attack: How Red Sift proactively identified and remediated a…

Rebecca Warren

In the world of cybersecurity, a new threat has emerged. Known as “SubdoMailing,” this new attack cunningly bypasses some of the safeguards that DMARC sets up to protect email integrity.  In this blog we will focus on how the strategic investments we have made at Red Sift allowed us to discover and protect against…

Read more