CIA, NSA and the Pentagon still aren't using a basic email security feature

Some of the most sensitive U.S. government departments and agencies still aren't using a basic email security feature that would significantly cut down on incoming spam or phishing emails. Fifteen percent of all U.S. government domains still aren't employing DMARC, or domain-based message authentication, reporting, and conformance policy on their domains, which email systems use to verify the identity that the sender of an email is not an impersonator. New data from security firm Agari shows that out of over a thousand federal domains, 75 percent have a DMARC policy that either monitors, quarantines to your spam folder or entirely rejects all spoofed emails.