Trump, DNC, RNC Flunk Email Security Test
Summary: A Krebs on Security review of campaign website email records found that hillaryclinton.com had fully implemented DMARC with a "p=quarantine" policy, while donaldjtrump.com was still set to "p=none," which only asks email providers to report messages claiming to come from the domain rather than block or quarantine them. The same review found that the sites for the DNC (dnc.org/democrats.org) and the RNC (gop.com/rnc.org) had not fully adopted DMARC either.
What's compelling: Dmarcian founder Tim Draegen said that if an organization has invested in click-tracking or other security products but has not done DMARC, it is wasting its time, and that enabling it can raise delivery rates by five to ten percent - so campaigns without it risk having appeals to voters and potential donors land in spam or be spoofed outright.
Read the original at Krebs on Security ↗
- Topics
- Governance, Risk & Compliance
- Related
- Upcoming Speaking Engagements Cyber Risks · Nov 14, 2026Friday Squid Blogging: Pacific Flying Squid Populations Dropping in Korean Waters Cyber Risks · Nov 13, 2026AI Doesn’t Have to Go Rogue to Break the World Cyber Risks · Nov 13, 2026