Photo: Jaap Arriens/NurPhoto via Getty Images

Only one of the top 50 federal IT contractors has fully implemented an email protocol designed to prevent fraud, the Global Cyber Alliance advocacy group reports.

Why it matters: Without a contractor using the DMARC protocol, recipients of emails claiming to be from that contractor will not automatically double check whether those emails are authentic. That means incoming emails could impersonate the contractor and fraudulently ask a victim to transfer money for unpaid bills or log in to a phishing website.

The details: DMARC allows recipients of an email to double check with the purported sender that it actually sent the email. If an email is faked, that purported sender can instruct the recipient to reject the email, send it to the spam folder or do nothing at all.

  • Only one firm has the reject setting turned on, according to the GCA audit.
  • One firm requests fake emails be treated as spam.
  • 26 have DMARC, but don't instruct the recipient to do anything if emails are fraudulent.
  • 21 do not have DMARC installed.
  • One has DMARC improperly configured, and makes no request.

The rules: The Department of Homeland Security required agencies to begin installing DMARC last year, but the order did not extend to contractors.

Go deeper

Updated 10 mins ago - Politics & Policy

Coronavirus dashboard

Illustration: Sarah Grillo/Axios

  1. Global: Total confirmed cases as of 7 p.m. ET: 31,759,233 — Total deaths: 973,904 Total recoveries: 21,811,742Map.
  2. U.S.: Total confirmed cases as of 7 p.m. ET: 6,939,645 — Total deaths: 201,861 — Total recoveries: 2,646,959 — Total tests: 96,616,779Map.
  3. Health: CDC director says over 90% of Americans have not yet been exposed to coronavirus — Supply shortages continue to plague testing.
  4. Politics: Missouri Gov. Mike Parson tests positive for coronavirus — Poll says 51% of Republicans trust Trump on coronavirus more than the CDC.
  5. Technology: The tech solutions of 2020 may be sapping our resolve to beat the coronavirus
  6. Vaccines: Johnson & Johnson begins large phase 3 trial — The FDA plans to toughen standards.
  7. Sports: Less travel is causing the NBA to see better basketball.

Trump refuses to commit to peaceful transfer of power if he loses

President Trump repeatedly refused to say on Wednesday whether he would commit to a peaceful transition of power if he loses the election to Joe Biden, saying at a press briefing: "We're going to have to see what happens."

The big picture: Trump has baselessly claimed on a number of occasions that the only way he will lose the election is if it's "rigged," claiming — without evidence — that mail-in ballots will result in widespread fraud. Earlier on Wednesday, the president said he wants to quickly confirm a replacement for Justice Ruth Bader Ginsburg because he believes the Supreme Court may have to decide the result of the election.

"Not enough": Protesters react to no murder charges in Breonna Taylor case

A grand jury has indicted Brett Hankison, one of the Louisville police officers who entered Breonna Taylor's home in March, on three counts of wanton endangerment for firing shots blindly into neighboring apartments.

The state of play: Angering protesters, the grand jury did not indict any of the three officers involved in the botched drug raid on homicide or manslaughter charges related to the death of Taylor.

Get Axios AM in your inbox

Catch up on coronavirus stories and special reports, curated by Mike Allen everyday

Please enter a valid email.

Subscription failed
Thank you for subscribing!