Page 130 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
An SMTP TLS aggregate report is I-JSON containing report metadata, applied policy, aggregate session counts, and optional per-failure details. A report should cover one UTC day, and senders should delay delivery to avoid overloading the report processor.
Read the checklist
One JMAP API request carries an ordered array of method calls, which the server processes sequentially and answers with an ordered response array.
Read the explainer
A DNSSEC-secure TLSA RRset with at least one usable record requires both TLS encryption and SMTP server authentication. If all records in a secure nonempty TLSA RRset are unusable, TLS remains mandatory but authentication is not; lookup errors defer delivery or try another MX.
Read the guide
Sieve tests are arguments to conditional commands and select which action block executes for a message. The base language supports keep, fileinto, redirect, and discard, while implementations may bound action counts and restrict incompatible combinations.
Read the playbook
Encoded-words are allowed only in specified text fields, comments, and phrase words; they are forbidden in addr-specs, quoted strings, Received fields, and MIME parameters.
Read the briefing
A mail client uses the domain part of the user’s address to query service-specific SRV names and obtains the selected endpoint’s target host and port.
Read the checklist
A delivery-status notification is a multipart/report with report-type delivery-status, a human-readable part, and a message/delivery-status part; returned original content is optional.
Read the explainer
A sender discovers MTA-STS through the policy domain’s _mta-sts TXT record, whose id value distinguishes policy revisions. In enforce mode, the sender requires STARTTLS and valid MX identity for each candidate, while a still-valid cached policy remains applicable when live retrieval fails.
Read the guide
Content-Disposition says whether a MIME body part is intended for automatic inline presentation or for user-initiated attachment handling; it does not define the media format.
Read the playbook
A Mailbox is a named collection of Email objects, and moving an Email between Mailboxes does not change the Email object’s identifier. An Email object represents one RFC 5322 message independently of the Mailbox and Thread objects that organize or group it.
Read the briefing