Securing incoming email to Jira Service Management with DMARC

[#1]

Hello Community,

We are glad to announce the ability to use DMARC to improve security for incoming email requests in Jira Service Management.

Domain-based Message Authentication, Reporting, and Conformance (DMARC) is a standard email authentication method that helps protect email senders and recipients from fraudulent emails or spoofing and phishing attacks. 

When DMARC is enabled for incoming emails in Jira Service Management, emails that don’t pass authentication checks will be blocked. This may cause some legitimate emails to be blocked if the sender hasn’t configured their email correctly. You can choose to disable DMARC if this is a concern, however, disabling DMARC may make your site less secure.

To enable this setting

      1. Go to Settings > Products > Jira Service Management > Email requests.

      2. Under DMARC incoming email authentication select Enable or Disable.

Note that customers with the Free edition of Jira Service Management and those trialing paid editions will not be able to disable DMARC.

For more information please read our documentation.

[Joao Zampa]

Hi Jason, 

One thing that concerns me about enabling this feature is that JSM projects do not push any alerts when emails fail to become a ticket or a comment.

E.g. Ideally if an email fails to be processed, the project admins should be alerted about the failure. Currently, the email fails silently as if the project admins don't check the logs regularly they would never be aware of the failures. 

[Max Deland]

Hi @Jason D'Cruz ,

Any plan to bring this feature to Data Center ?

Thanks!

[Tibor Hegyi _META-INF_]

Hi @Joao Zampa though we do not yet support DMARC, our emailing app for Jira supports webhook based alerting when an incoming emails fails to be processed for any reason. If this is a major concern for you, please check out the pages I linked, it may be helpful to you.

Regards,

Tibor

[Joao Zampa]

Thanks @Tibor Hegyi _META-INF_