June 25, 2004

Sender ID e-mail spec submitted to standards body

Sender ID could close loopholes that let e-mail senders fake the origin of their messages

Microsoft Corp. has submitted a draft technical specification of the e-mail authentication system Sender ID to the Internet Engineering Task Force (IETF) for consideration as an industry-wide standard, the Redmond, Washington software company announced this week.

Sender ID combines Microsoft's Caller ID for E-mail (which was submitted to the IETF for consideration in May) with Sender Policy Framework (SPF). SPF, also known as Sender Policy Framework, was authored by Meng Weng Wong, the cofounder and chief technology officer at Pobox.com, a provider of subscription-based e-mail forwarding and mailing list services. Meng submitted SPF to the IETF in February.

Sender ID maintains lists of IP (Internet Protocol) addresses from which sent e-mail can be traced, and if adopted as a standard, could provide a way to close loopholes that allow e-mail senders to spoof or fake the origin of their message. The unified specification, which was the result of discussions between Microsoft and Meng that lasted from January to May, is aimed at simplifying industry adoption of effective e-mail authentication technology, Microsoft said in a statement Wednesday.

The IETF is also considering another mail authentication submission from Yahoo Inc., called DomainKeys. DomainKeys works differently from Sender ID by using encryption to generate a signature based on the e-mail message text that is placed in the message header.

IETF is a large open international community of network designers, operators, vendors and researchers whose work is carried out in working groups that operate mainly through mailing lists. The IETF holds three meetings a year, with the next one scheduled to take place Aug. 1 to Aug. 6 in San Diego.

The push for an e-mail authentication standard has recently been gaining more attention. On Tuesday, the Anti-Spam Technical Alliance's (ASTA), whose members include such high profile e-mail providers as Yahoo, Microsoft, America Online Inc. and EarthLink Inc., released its recommendations for stemming the tide of spam, or unsolicited commercial e-mail.

 

Close

On Twitter now

Applications

Powered by Twitter

On Twitter now

White Paper

D2D Virtual Tape Library Replication Primer

This whitepaper explains the terminology and concepts behind Data Replication technologies and establishes some sizing rules through worked examples. Learn the new paradigm in disaster tolerance—protect data anywhere.

Download now »

White Paper

An Alternative to Virtualization for Datacenter Cost Savings

Server virtualization is a popular option for dealing with mounting datacenter costs. Another equally promising approach is the use of an Application Delivery Controller. Citrix NetScaler provides a low-cost way for organizations to reduce their server count and accrue cost savings from a reduction in space, cooling, power and personnel.

Download now »

White Paper

Why Your Firewall, VPN, and IEEE 802.11i Aren't Enough to Protect Your Network

The emergence of WLANs has created a new breed of security threats to enterprise networks.

Included in HP ProCurve WLAN solutions is security technology that alleviates threats from WLANs through:
* Monitoring wireless activity inside and out of the enterprise
* Classifying WLAN transmissions into harmful and harmless
* Preventing transmissions that pose a security threat to the enterprise network
* Locating participating devices for physical remediation

Download now »

White Paper

Bringing the Edge to the Data Center

Effectively address data protection challenges, implementing solutions that help store and protect business–critical data while cutting costs and improving efficiency and reliability.

Download now »

Sign up to receive Applications Resource Alerts

Subscribe to the Today's Headlines: First Look Newsletter

Find out what will be news for the day, with our first-thing-in-the-morning briefing.

©1994-2009 Infoworld, Inc.