|Scenario Task Parent=I want to be certain of the recipient's identify (and vice versa)
|Scenario Task Type=Impersonation
|Scenario Task Description=Several systems have been developed in recent years to help authenticate the sender of an email message. The most popular of which are [https://en.wikipedia.org/wiki/Email_authentication DKIM and SPF]. These are network level protocols that either confirm the domain name (e.g. @equalit.ie) that the message was sent from or check the sender's [https://learn.equalit.ie/wiki/How_does_the_Internet_actually_work%3F#Internet_Protocol_.28IP.29_Address IP address] against a list of known malicious addresses. Gmail users should read the [https://support.google.com/mail/answer/180707?hl=en Email authentication] guide. In general, you must rely on your email provider to perform sender authentication. Users who wish to inspect their received messages manually, need to [https://www.arclab.com/en/kb/email/how-to-read-and-analyze-the-email-header-fields-spf-dkim.html view the message header] (or message source as its sometimes referred to) and authenticate it themselves.
* [http://dkimcore.org/tools/dkimrecordcheck.html DKIM authentication ]
* [http://mxtoolbox.com/spf.aspx SPF record lookup]
Users who would like to see if their email provider runs provides DKIM and SPF authentication (for emails that you send to others) can try the [http://dkimvalidator.com/ DKIM Validator] website. Simply send an email to the address on that page and then click to view the results.
}}