NOW READ THIS
("Security Advisory")



Submitted by: Bill Hickey
NCVA List Master

NRT-0183 Promising Anti-Spam Technique Gets Preliminary Approval:


A key Internet standards body - the Internet Engineering Task Force - gave preliminary approval on 22 May to DomainKeys Identified Mail, a powerful technology designed to detect and block fake email messages. Advocates say it will provide "businesses with heightened brand protection by providing message authentication, verification and traceability to help determine whether a message is legitmate." DomainKeys works by embedding a digital signature in the headers of an outgoing email message. If the cryptographic signature is confirmed, the message can be delivered as usual; otherwise, it can be flagged as spam. DomainKeys is said to be more promising that existing antispam and antiphishing technologies, which rely on techniques such as assembling a blacklist of known spammers or attempting to detect common characteristics of spam messages using Bayesian filtering. However, DomainKeys is only effective if BOTH the sender and recipient's mail systems are upgraded to support the standard. While Microsoft's Sender ID program is similar in principle to DomainKeys, its acceptance has been limited due to initial patent licensing, according to the report.

(news.zdnet.com 22MAY07)



Last Modified: Monday, 28-May-2007 09:19:59 EDT