.POST Security Policies

This document provides organizations with information on the UPU's deployment of DNSSEC in the .POST zone, including policy and controls around the creation; management and protection of the cryptographic keys used to sign the .POST zone.

This policy provides e-mail server authentication rules for establishing e-mail servers under .POST, using the Sender Policy Framework (SPF), DomainKeys Identified Mail (DKIM) and Domain-Based Message Authentication, Reporting and Conformance (DMARC).

 

Transport Layer Security (TLS) is an open standard for encryption which enables people and applications to communicate in private over the Internet. TLS is the successor to Secure Sockets Layer (SSL) technology, and it provides three essential services to help ensure security on the Internet:  1. Message confidentiality, 2. Authentication, 3. Message integrity

No redirection of .POST domains should be allowed (to avoid misuse and hijacking).