Outlook.com increases security with support for DMARC and EV certificates

re: Outlook.com increases security with support for DMARC and EV certificates

Krish Vitaldevara — Wed, 19 Dec 2012 12:29:16 GMT

Today we use a mix of Authentication, sender reputation and sender's susceptibility to phishing attacks to determine which senders to offer green shield to. DMARC and Authentication go hand in hand. If we only use authentication and/or DMARC without the other two factors you can see how spammers can use it to their advantage and try to increase the legitimacy of their campaigns. Hence the difference in behavior you noticed in those two cases. DMARC plays a pivotal role in significantly expanding the coverage for the trusted senders so please stay tuned.

re: Outlook.com increases security with support for DMARC and EV certificates

Maaz Kalim — Wed, 19 Dec 2012 11:04:58 GMT

I don't believe your third point which you have written for Skydrive.

re: Outlook.com increases security with support for DMARC and EV certificates

Martijn Groeneweg — Wed, 19 Dec 2012 09:32:39 GMT

@Krish I have 2 questions:

1) Mail I receive in Outlook.com from the domain paypal.nl gets a green shield, but there is no DMARC record published for the domain paypal.nl.

2) We send e-mail, also out office mail, for example form the domain measuremail.com, that is fully DMARC compliant, but nog green shield appears in Outlook.com

Could you please help me on these issues?

re: Outlook.com increases security with support for DMARC and EV certificates

Michael Fayez — Sun, 16 Dec 2012 00:00:33 GMT

I'd love to see RSS feeds in outlook.com as i see in outlook application. I think microsoft should have a competitor for google reader.

re: Outlook.com increases security with support for DMARC and EV certificates

Interested User — Thu, 13 Dec 2012 04:12:48 GMT

I'd LOVE to switch from the ugly and slow Google Apps to Windows Live Admin Center Outlook.com or whatever it is called now ;) But so many things which are even available at the "we have 20 customers Zoho service" are missing, Microsoft.

1. I do have around 200 alias addresses. microsoft.com@example.com, websitebla.com@example.com, sendspamhere@example.com etc. In Google Apps I didn't have to set up each account. I set up a main@example.com account when I signed up and enabled a wildcard account.

I asked around a year ago and it was NOT possible to set up a wildcard (*@example.com) address using Windows Live Admin Center. Microsoft support recommended me (no kidding!) to create 200 and more alias accounts (all real accounts!) and fordward each and every alias account to my main@example.com Outlook.com (former Hotmail) account. It's getting better: MSFT also told me to regulary log in to each account so that it doesn't get deleted. So that means I can log in to hundreds of accounts every X weeks? If we would have 1986, I'd agree. In 2012 it's kinda ridiculous! So, please allow custom domain users to set up a wildcard address.

2. No IMAP. I know you want to urge.. sorry.. promote your super special synchronization protocol to your users, but accept that people want to use their existing IMAP clients (Pine or whetever) every once in a while.

3. Skydrive: Fantastic. Great integration with Outlook. But I am not allowed to upload whatever I want to Skydrive. For example, I am not allowed to upload my beach photo cause it shows partial *nudity*. Sure, I could encrypt each and every photo but that doesn't make sense, does it? I can understand if I would *share* photos, videos or whatever (legal problems, traffic... etc.)...

4. No XMPP integration. Sure you want to promote Skype but why not allowing users to set up their existing XMPP accounts? That way you could easily steal millions of users from Google etc.

5. Outlook.com address book: Even a 20 buck PDA allows me to set up custom photos for contacts. Not possible using Outlook.com? Oh please.

re: Outlook.com increases security with support for DMARC and EV certificates

Krish Vitaldevara — Tue, 11 Dec 2012 15:51:32 GMT

@Dirk, you have to work with whoever is hosting your custom domain to publish DMARC policy for the domain as part the DNS record of that domain. In most cases DMARC is useful for brands that are more susceptible to phishing and are phished frequently. Do you believe that your custom domain needs the same level of protection? You can read more about how to setup authentication and publish DMARC policy at http://www.dmarc.org or www.returnpath.com/.../how-to-implement

re: Outlook.com increases security with support for DMARC and EV certificates

azraq — Tue, 11 Dec 2012 03:24:21 GMT

impressive keep up the good work you are building the best email service

re: Outlook.com increases security with support for DMARC and EV certificates

Gavin Ding — Mon, 10 Dec 2012 23:34:19 GMT

It's Great!