Google
 

SPF and Sender-ID RFCs Published

Thursday, May 4th, 2006

After over two years of work and arguments, the IETF finally published the RFCs for SPF and Sender-ID. They are as follows: RFC 4405 - SUBMITTER SMTP extensions to be used with Sender-ID RFC 4406 - main Sender-ID draft RFC 4407 - PRA algorithm (which is what Microsoft was trying to patent - ...

IETF Movements in Email Authentication

Friday, May 20th, 2005

While email authentication is no longer such hot topic as it was last year, nevertheless the two main proposals (SPF and Sender-ID) are moving slowly through the IETF process to become experimental protocols. Both just published new drafts (spf and sender-id [1], [2] and [3]). At the same time it ...

Something’s Cooking at the IETF with Email Authentication

Sunday, January 16th, 2005

(This article was published by Circle-ID) DISCLAIMER: I do not have any inside knowledge regarding this nor have I discussed this with any IETF folks. This is based purely on publically available information. A few months ago, Ted Hardie (AD of Applications for the IETF) informed the MARID WG in the closure ...

2004: The Year That Promised Email Authentication

Saturday, December 25th, 2004

(This article was published at Circle-ID) As the year comes to a close, it is important to reflect on what has been one of the major actions in the anti-spam arena this year: the quest for email authentication. With email often called the "killer app" of the Internet, it is important ...

Yahoo Begins to Use DomainKeys

Sunday, November 14th, 2004

According to a CNET article, Yahoo will begin on Monday to sign all outgoing email with DomainKeys signatures: Yahoo on Monday will begin attaching antispam technology to all of its outgoing e-mails, hoping that other providers will follow suit. Messages from its free e-mail service will include a "Domain Key," a ...

FTC, Microsoft and Sender-ID

Tuesday, November 9th, 2004

As FTC's email authentication summit takes place today in Washington (together with IETF's 61st meeting), several interesting things are afoot. First of all, the "industry" published a letter of support for Sender-ID including a signature from Meng Wong, the author of SPF. Declan McCullagh of CNET reported today on the ...

Learning from Ebay to Fight Spam

Thursday, September 23rd, 2004

While reading some mailing lists posts about email authentication and reputation an interesting thought occured to me. Ebay's feedback system, while imperfect, does present a sucessful reputation system in the online world. Perhaps we can learn something from them.

Sender authentication moving ahead

Friday, May 21st, 2004

A lot of things happened this week: MAAWG meeting took place, Yahoo submitted DomainKeys to the IETF and a Microsoft submitted Caller ID draft to the IETF and SPF is merging with Caller ID via an addition of an ESMTP parameter for MAIL FROM. Architechurally speaking, I liked the idea ...

Reputation systems: Learn from the Past

Tuesday, March 2nd, 2004

Reputation systems: Learn from the past As the IETF BoF on mail authentication gets closer, more media and corporate attention is being attracted to the problem. And many articles mention that authentication is not the answer but rather reputation based on authentication is what will help the problem. It seems ...