Articles — CPaaS Intel

TLS for Mail: M3AAWG Baseline Recommendations

arrow_right_alt M3AAWG establishes baseline TLS recommendations for mail server security and encryption standards
arrow_right_alt Guidelines provide implementation best practices for securing email transmission between mail servers
arrow_right_alt Recommendations address TLS configuration, deployment strategies, and ongoing maintenance requirements

arrow_right_alt SMS blasters achieve 100% delivery rates by impersonating cell towers and forcing phones to downgrade to unencrypted 2G connections.
arrow_right_alt Messages sent via SMS blasters bypass carrier networks entirely and cannot be blocked or monitored by network operators.
arrow_right_alt The attack exploits fundamental protocol weaknesses in mobile network authentication that affect all carriers regardless of 2G sunset efforts.

arrow_right_alt Erin West's keynote highlighted the crisis-level scamdemic, particularly pig butchering scams in Southeast Asia, calling for improved national reporting systems and victim services.
arrow_right_alt AI-driven abuse and countermeasures dominated conference sessions, covering shadow data attacks, AI-curated fraud datasets, and agentic AI security risks.
arrow_right_alt Email security advancements discussed include DKIM2 transition pathways, post-quantum cryptography architecture, and AI-enhanced email abuse detection systems.

arrow_right_alt M3AAWG provided formal comments to NIST's RFI on security considerations for AI agents
arrow_right_alt The submission addresses risks and security implications of AI systems in messaging contexts
arrow_right_alt M3AAWG's input contributes to developing security frameworks for AI agent deployment

arrow_right_alt Tom Bartel elected M3AAWG Chairperson with focus on collaboration and steady execution against online abuse.
arrow_right_alt Mary Youngblood of Adobe joins as Co-Vice Chair, bringing decades of email deliverability expertise and mentorship commitment.
arrow_right_alt Connie Klingelhoefer from AT&T becomes Assistant Treasurer, leveraging 25+ years of network operations and security leadership.

arrow_right_alt Amy Cadagin's 20-year tenure transformed M3AAWG from an informal volunteer-driven organization into a structured entity with defined Priority Areas and clear accountability frameworks.
arrow_right_alt She introduced formalized processes for capturing, supporting, and advancing work while maintaining the collaborative culture that defines the anti-abuse community.
arrow_right_alt Her leadership during the 2020 pandemic transition ensured M3AAWG maintained momentum and member engagement despite unprecedented global disruption.

arrow_right_alt M3AAWG is sponsoring and helping design a major Gallup survey examining the scope and impact of scams on Americans.
arrow_right_alt The survey investigates how scammers reach people, scam frequency, financial losses, reporting obstacles, and psychological consequences.
arrow_right_alt M3AAWG members contributed to survey design through an Open Round Table session and subsequent member feedback.

arrow_right_alt Erin West will keynote M3AAWG66 discussing multinational scam operations, human trafficking, and organized crime networks.
arrow_right_alt West spent 26 years as a Deputy District Attorney investigating cryptocurrency-enabled crimes, SIM-swapping, and digital financial fraud in Silicon Valley.
arrow_right_alt Operation Shamrock provides victim services and works to dismantle organized fraud by mobilizing law enforcement, regulators, and cross-sector partners.

arrow_right_alt M3AAWG is actively championing Data Privacy Week 2026 to raise awareness about data collection practices and encourage individuals to take control of their personal information.
arrow_right_alt Organizations must respect privacy rights while individuals should review app permissions, adjust privacy settings, and implement the Core 4 security practices including strong passwords and multi-factor authentication.
arrow_right_alt Global inconsistencies in data protection laws create loopholes that allow organizations to continue data collection activities legally, making user education and advocacy essential.

arrow_right_alt M3AAWG establishes a dedicated Financial Services SIG to address sector-specific anti-abuse needs
arrow_right_alt The initiative integrates financial sector requirements into M3AAWG's global anti-abuse ecosystem
arrow_right_alt Source-level defenses are prioritized to combat financial abuse at the origin point