Email Security Changes

Computer monitor screen showing inbox

In February, Google and other email service providers will enforce stricter requirements on senders of bulk mail to help reduce spam and malicious email. To meet these requirements, administrators of email marketing platforms (e.g., Mailchimp, Constant Contact, etc.) need to set up new email authentication protocols to avoid disruption in delivery.

Email providers, such as Gmail, Yahoo, and AOL, reject or mark messages as spam that are sent from services (bulk mail systems, cloud services) on behalf of Harvard, but do not send the email from Harvard servers. This is because these providers use a technology called DMARC (Domain-based Message Authentication, Reporting and Conformance) to verify the authenticity of the sender to prevent spoofing and phishing.

If you manage any vendor system that sends mail from a Harvard email address but does not use Harvard email servers, please contact Harvard Chan School IT in order to evaluate if these emails will continue to be delivered to all recipients.

The Emma email marketing software is already being handled by Harvard Chan School IT.