ISM-1026

DKIM signatures on incoming emails are verified.

Topic
DomainKeys Identified Mail
Applicable to
all

History

Priority
recommended
Jun 2023
DKIM signatures on incoming emails are verified.
A minor grammatical change was made to the existing control relating to the verification of DomainKeys Identified Mail (DKIM) signatures on incoming emails.
Jan 2020
DKIM signatures on received emails are verified.
Security control 1026 was modified to remove the crossover with security control 1027.
Dec 2019
DKIM signatures on received emails are verified, taking into account that email distribution list software typically invalidates DKIM signatures.
2015
Agencies should verify DKIM signatures on emails received, taking into account that emaildistribution list software typically invalidates DKIM signatures.
2010
It is recommended agencies verify DKIM signatures on emails received, taking into account that emaildistribution list software typically invalidates DKIM signatures.