On The Insider: Tila Tequila Announces Engagement
BNET Business Network:
BNET
TechRepublic
ZDNet
TalkBack 29 of 98:
Next »
« Previous
good points
I think what is really lost here is that headers no longer serve as a true audit trail to the same degree as before. Currently, I have a good idea of when email is written, but even if the user's clock is off by a decade, the other headers tell me when it was sent, more or less.

Under the new scheme, I still can get all the same headers as before. But if they get sent before the message body, then it's theoretically possible for a user to modify the message between the time it was sent and the time I receive it without any indication given to me.

I'd still be getting what the sender wanted me to get, and I don't anticipate that this would be a general problem, but it's still a concern and a potential problem.

The other issue is that, for most users, it will be on an ISP's server and these possibilities would be out of the user's hands. The header information could tell me this much. Then, unless the user works for the ISP, it's not very likely to be a problem. Even if the user works for the ISP, it's still remote.

So it could mean that in some environments where these factors matter, the concept of a trusted server for sending would be more important than merely having an identifiable one. Then if the standard calls for the timestamp to change if the email is modified, it will work. But it will not be guaranteed to be reliable unless one can trust the that the sender's server is secured from the sender.
Posted by: wresnick   Posted on: 10/12/04 You are currently: a Guest | Members login | Terms of Use
Reply to Story Reply to Message

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

We already have the means to stop...  bjbrock | 10/08/04
Hasn't this been looked at and rejected?  ejhonda | 10/08/04
Nothing will ever be 100% fool proof.  bjbrock | 10/09/04
I Agree With You  MannionTm | 10/11/04
SPF - looked at and rejected?  winthropyu | 10/10/08
Yes, we do.  SC-man | 10/08/04
The power of the consumer to change...  bjbrock | 10/09/04
No, its called profit incentive  jay@... | 10/11/04
Yes, it has been looked at  zspai | 10/11/04
Incentive  wallyweb@... | 10/08/04
Incentive offset  ejhonda | 10/08/04
storage  Middle of the Road | 10/08/04
The *ONLY* way to stop spam is $$$$  Jomo_z | 10/11/04
Stamp Out Stamps  rjmcgaffin@... | 11/10/04
Sounds good.  ejhonda | 10/08/04
Sounds good... for spammers  jim_in_phoenix | 10/11/04
Nice try, but  kiddpeat | 10/11/04
How does that help me?  Jomo_z | 10/12/04
Actually much of today's spam is not stored on the sender's server  Taz_z | 10/08/04
Re-read the article  lstone@... | 10/11/04
Re-read the article  ToddMarshall | 10/12/04
re: Re-read the article  Wolfie2K3 | 10/12/04
This idea is ludicrous  htotten | 10/08/04
Ludicrous? Entirely wrong on both counts.,  dberlind | 10/08/04
Three issues...  MerryOtter | 10/11/04
Orwelian crap?  wresnick | 10/11/04
one more point about Orwellian crap.  wresnick | 10/11/04
Orwellian Crap  MerryOtter | 10/11/04
good points  wresnick | 10/12/04
Partly right, but for a different reason  wresnick | 10/11/04
Wrong on One More Count  jaoifalkjsdao | 10/11/04
this also depends on the user  wresnick | 10/11/04
The ISP's win  lstone@... | 10/11/04
How I got here...  Margaret Brock | 10/08/04
Re: using RSS Feeds  Bruceslog_z | 10/11/04
link  Bruceslog_z | 10/11/04
last try  Bruceslog_z | 10/11/04
Hello? Spammers are already doing this  cfortune | 10/08/04
Two BIG things wrong  mikegalos@... | 10/11/04
You missed the point  poppedcorn | 10/11/04
Not exactly...  jaydyess | 10/11/04
Hopefully not...  randysmith@... | 10/11/04
Re. Hopefully not  ToddMarshall | 10/11/04
Let's do this................HOW?  gburke@... | 10/11/04
Who's in charge?  JackM_z | 10/11/04
"This sounds like an excellent solution..."  Jomo_z | 10/11/04
Pay attention  BIGDSEW | 10/11/04
I Paid attention...now you try it...  Jomo_z | 10/12/04
One other item ...  KS99 | 10/11/04
This is NUTS!  riff7raff | 10/11/04
Explain Please  lstone@... | 10/11/04
Email changes?  jskline0@... | 10/11/04
OK for some , but not all  archief | 10/15/04
It sounds good -- BUT  fitobetied | 10/11/04
Where does the message go?  lstone@... | 10/11/04
Where does the message go?  Jomo_z | 10/11/04
Where does the message go?  lstone@... | 10/12/04
Huh?  Jomo_z | 10/12/04
Sounds good? Nope....  Jomo_z | 10/11/04
You don't seem to get it...  misereor | 10/12/04
Blocking servers...  Jomo_z | 10/12/04
Re:  misereor | 10/14/04
Viruses  thaddeusq | 10/11/04
A case for "spoofing"  Kevin Dean | 10/11/04
I Like it  Bruceslog_z | 10/11/04
Good idea, but not necessarily necessary  wresnick | 10/11/04
Necessary  Kevin Dean | 10/11/04
But that would not work  wresnick | 10/12/04
Slight misunderstanding on my part  Kevin Dean | 10/14/04
I think we are converging  wresnick | 10/14/04
We've converged  Kevin Dean | 10/15/04
Leaving to sender does not work now.  rpage_z | 10/11/04
RE: Validating  Bruceslog_z | 10/11/04
I wonder....  Stu_z | 10/11/04
Prior "pull email" discussions  zspai | 10/11/04
Thanks, but David can't read.  JohnBeaman | 10/11/04
Leave (spam) to the sender  cshul | 10/11/04
Spoofing the recipient  Gezelig | 10/11/04
Must be a recipient initiated request  wscottcross@... | 10/11/04
Actually, this IS preposterous  gadfly_z | 10/11/04
When are ISP going to filter OUTGOING emails?  JohnBeaman | 10/11/04
Spammers will hate it, but  kiddpeat | 10/11/04
You can find no problem? Are you stupid?  JohnBeaman | 10/11/04
You can find no problem? Are you stupid?  Grolan | 10/11/04
I see clueless people...  misereor | 10/12/04
Not a good idea  howard@... | 10/11/04
How does my mail server know the mail if for you?  john.gruber@... | 10/11/04
You have a valid complaint, but...  misereor | 10/12/04
requring certificates  john.gruber@... | 10/12/04
SPAM & Spyware  G T Baker | 10/12/04
Good and Bad ...  ghastly | 10/15/04
The payoff could be a lot quicker  wresnick | 10/15/04
www.spamexile.com  PDurrant | 10/15/04
They are not doing that at all  wresnick | 10/15/04
Spam  jlund25@... | 10/17/04
No simple solution will do it.  Robert Carnegie | 10/18/04
see this url for an article to read  tldwg04011 | 12/13/04
Is there a software that does this now?  MajorEd | 02/26/05

What do you think?

SponsoredWhite Papers, Webcasts, and Downloads

advertisement
advertisement

IT Solutions for 2010

  • Get cost-effective strategies and roadmaps on the most important issues facing IT leaders in 2010! Learn how to easily cut costs and deliver greater efficiency starting with your database, IT compliance management and data center. Visit the IT Leaders Dashboard. Visit the IT Leaders Dashboard.
  • Read about top issues IT decision-makers face every day, plus get cost effective solutions to real life IT problems. Oracle Topline