4/3/2025 at 12:04:53 PM
I've noticed that many .gov email addresses just relay to gmail. I assume or hope it's at least business accounts and I hope they require 2FA at least. This has mostly been state .gov addresses that I have experienced gmail bounces, errors and such but there probably needs to be an extensive audit done for all .gov email addresses to see what is being relayed or routed where and which of those emails are encrypted and have the correct government classification headers for gov-to-gov emails. That should give DOGE something to do.by LinuxBender
4/3/2025 at 12:52:58 PM
FYI, the US National Oceanic and Atmospheric Administration (NOAA) runs on GSuite/Google Workspace. Both PIV and WebAuthn are used for MFA. I've never seen anything there that wasn't simply unclassified, but for communications that need extra layers of encryption/DLP, they also have Kiteworks.by evanjrowley
4/3/2025 at 1:57:34 PM
Nice they have DLP. Have they configured it to analyze or look for classification headers and are there teams that will reach out to violators and politely re-educate them?by LinuxBender
4/3/2025 at 3:51:46 PM
Great question. If you ask senior management, the answer will be yes. ;)by evanjrowley