Linux.com

Feature

Spam abatement proposals gathering momentum

By Fergus Cassidy on May 24, 2004 (8:00:00 AM)

Share    Print    Comments   

The temperature around spam abatement became hotter last week when Microsoft submitted a draft proposal to the Internet standards body, the Internet Engineering Task Force (IETF).

The draft, known as OCaller ID for E-mail, proposes to utilize the Internet's domain name system (DNS) and described the proposal as "analogous to the caller ID technology found in the telephone system."

Last January, the IETF set up a work group to discuss the creation of a mechanism to identify authorized senders for email from a domain.

Microsoft's move confirms that using the DNS to control spam is gathering serious momentum, but such a strategy must be widely adopted to stand any chance of success.

Attaching restrictive licensing can prevent a proposal from becoming an agreed standard, and it will be interesting to see how Microsoft will respond to IETF scrutiny and how the licensing issue is resolved.

However, Microsoft is not alone in chasing a spam control standard. Last week, Yahoo! also submitted its own proposal to the IETF. Known as DomainKeys, the technology has the same objective as Microsoft's Caller ID but uses digital signatures to confirm identity.

But the dark horse could be OSender Policy Framework (SPF). SPF is similar to caller ID and aims to reduce spam by identifying email forgery. SPF has been submitted to the IETF. It has also been tested by America Online.

There have been many attempts to find the killer app for killing spam, but last week's developments indicate that a "go it alone" solution is now unworkable and has been abandoned.

Any proposed solution must become an agreed standard, and all roads now lead to the IETF's MARID working group.

Such proposals, however, can be radically altered (or passed over) by the standards process to the extent they are sometimes unrecognizable at the outcome. The type of license can also be a major obstacle to agreement.

So why submit in the first place? Harald Alvestrand, the chair of the IETF, said: "Because they believe their technology is a good fit for the requirements. And they might be right (or not). But they're willing to go along with the result of the standards process, even if that is significantly different from what they start out with."

The IETF is accustomed to navigating political minefields. If it can do so again with this issue, there might well be the much-needed breakthrough before the end of this year.

Fergus Cassidy is a technology columnist with The Sunday Tribune.

Share    Print    Comments   

Comments

on Spam abatement proposals gathering momentum

Note: Comments are owned by the poster. We are not responsible for their content.

Hijacking another community idea?

Posted by: Anonymous Coward on May 24, 2004 07:22 PM
Not sure about the rest of you, however my machines have required the sending machine to have a DNS entry for over 5 years. Most if not all federal agencies require this. Clearly this was already prior art out there and won't require a license. Many installations if not all do a reverse query to the sending machine/domain to see if the user exists as well. A lot of good that does if it comes from Hotmail/msnet or aol though.


AOL's approach seems to be a good one. Hit them in the pocketbook. Even as anonymous as IPV4 is, they still track them down. Recently they gave away a nice high end car that they took from a spammer along with his house and most of his posessions as settlement from being sued. Not sure if that will stop them or not. AOL's spam volume went way down, however. Looks like Microsoft wants to hit the customer with yet another fee for stopping spam that almost always originates on a machine that runs their OS. Seems like they would give any solution away for free.

#

Kinda like yahoo's idea

Posted by: Sam Leathers on May 24, 2004 08:01 PM
Are they basing that on the existing gpg signature, so everyone would have to sign their e-mail? If so, I guess no on would be complaining about my "annoying" signature, attached to all mail. If they base it on this, another advantage is practically all mail clients would support encryption. How many times have I wanted to send an encrypted e-mail to someone only to find out they don't have a key?

#

Re:Kinda like yahoo's idea

Posted by: Sam Leathers on May 24, 2004 08:11 PM
Never mind last post, just read proposal, and it will complement it, not replace it. And, in regards to MTA's, I hope Postfix isn't far behind in their priority of getting the technology setup.

#

This story has been archived. Comments can no longer be posted.



 
Tableless layout Validate XHTML 1.0 Strict Validate CSS Powered by Xaraya