On TV.com: 5 TV Shows We'd Love on the BIG SCREEN
BNET Business Network:
BNET
TechRepublic
ZDNet
TalkBack 24 of 57:
Next »
« Previous
Sender-ID authorizes, it does not authenticate.
Many are under the false impression Sender-ID or SPF authenticate the sender of a message. They do not. Sender-ID would limit a user's choice of return mail addresses by way of limited authorization of sending SMTP servers. Sender-ID would not be effective against phishing, as the PRA algorithm may ignore the From address. Sender-ID does not allow blacklisting of senders without authentication. SPF and Sender-ID may require hundreds of DNS lookups to obtain the complete record set and are thus broken.

There are other standards in process that will authenticate the sender and provide better consumer protection than that possible with Sender-ID. This standard suite is called Client SMTP Validation (CSV). CSV does not add any additional DNS Lookups, and by making the authenticated EHLO name visible to the user, phishing can be effectively thwarted without excessive record management or difficult and patented algorithms.

-Doug
Posted by: dotis   Posted on: 09/13/04 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

I read the first paragraph and that was enough  mlindl | 09/13/04
Funny..  Patrick Jones | 09/13/04
Microsoft fails in their attempt to "own" e-mail.  Seething Ganglia | 09/13/04
meanwhile....  tamuhockey | 09/13/04
outlook - ms mail server works fine  V Sanders | 09/14/04
Do you have any proof?  d_jedi | 09/13/04
Did Microsoft put all the cards on the table?  DonnieBoy | 09/13/04
and if you wait until after the fact  V Sanders | 09/13/04
It would appear the answer is yes...  No_Ax_to_Grind | 09/14/04
what more?  ryusen | 09/14/04
Huh? Anyone can do a patent search...  No_Ax_to_Grind | 09/14/04
Can you do a pending patent search?  Michael Kelly | 09/14/04
Microsoft's track record speaks for its self  Seething Ganglia | 09/13/04
we have all seen with IE  V Sanders | 09/13/04
What did y'all expect after the DOJ ...  Judas I. | 09/13/04
Pobox's SPF email proposal  Nigel Johnstone | 09/13/04
And here is why that proposal won't work either:  Confused by religion | 09/13/04
SPF *still* working perfectly  Nigel Johnstone | 09/13/04
Blacklisting of SPF names risky.  dotis | 09/13/04
Sorry Milly, not a good link...  John Le'Brecage | 09/13/04
Sender-ID makes SPF stronger  Roger Ramjet | 09/14/04
No, not completely..  Patrick Jones | 09/13/04
spammers publishing SPF is GOOD!  CobraA1 | 09/14/04
Sender-ID authorizes, it does not authenticate.  dotis | 09/13/04
What?  Patrick Jones | 09/13/04
Umm, really?  CobraA1 | 09/14/04
Follow up  CobraA1 | 09/14/04
very cool  V Sanders | 09/13/04
Reality check to Microsoft- we don't need you.  Xunil_Sierutuf | 09/14/04
The real question, does it matter when you own the market.  No_Ax_to_Grind | 09/14/04
This is a server based technology, not desktop!  B.O.F.H. | 09/14/04
Correct, to a point.  No_Ax_to_Grind | 09/14/04
You really aren't that clueless, are you?  B.O.F.H. | 09/14/04
And you aren't listening.  No_Ax_to_Grind | 09/14/04
Yes he really is that clueless!  sa_z | 09/14/04
It'll be a question of who can last the standoff the longest  Michael Kelly | 09/14/04
SPF augmenst DNS, get a clue!  B.O.F.H. | 09/14/04
Gaining market share  alterego_z | 09/14/04
what does joe average use for e-mail?  ryusen | 09/14/04
You really need to stop.  Patrick Jones | 09/14/04
See: Correct to a point.  No_Ax_to_Grind | 09/14/04
I did. You are still wrong.  Patrick Jones | 09/14/04
Cornered with facts.  sa_z | 09/14/04
wasn't there another article, recently where...  ryusen | 09/14/04
Once more See "Correct to a point".  No_Ax_to_Grind | 09/14/04
At least Mike Cox intends to be funny!  sa_z | 09/14/04
And you attempt what? Blank posts???  No_Ax_to_Grind | 09/14/04
That youa are a M$ troll  sa_z | 09/14/04
I only see one person calling names. YOU!  No_Ax_to_Grind | 09/14/04
No_Ax, you need to learn some basic vocabulary!  B.O.F.H. | 09/14/04
Troll Factor 9.4  sa_z | 09/14/04
Yes you are a name caller but I won't hold it against you.  No_Ax_to_Grind | 09/14/04
damn, that was a really harsh slam on Microsoft!  B.O.F.H. | 09/14/04
on front page extensions...  ryusen | 09/14/04
Wrong again  Richard Flude | 09/14/04
No_Ax fails to respond to valid criticism  CobraA1 | 09/15/04
Natural Consequence  John L. Ries | 09/14/04

What do you think?

SponsoredWhite Papers, Webcasts, and Downloads

advertisement
advertisement
  • Smart Tech Expert advice on innovations in healthcare and the green technologies that make it happen. Find out more
  • Smart Business Discussion and advice on management issues that revolve around making your world smarter and more useful. More Smart Advice
  • Smart People The best and worst moves in the management and strategy trenches. Learn More