Spam
DomainKeys attaches an encrypted digital signature unique to the sender to each email

DomainKeys approved as anti-spam standard

Yahoo/Cisco technology aims to prevent spoofing

Written by Shaun Nichols in California

The Internet Engineering Task Force has granted preliminary approval to DomainKeys Identified Mail (DKIM). 

The industry standard promises to curb spam by preventing spoofing, the forging of the sender's email address to make it appear as if the message originated from a reputable company instead of a spammer.

Advertisement

DomainKeys attaches an encrypted digital signature unique to the sender to each email when it is sent. If the sender's address does not match the signature it can be discarded as spam.

The technology was pioneered by Yahoo and Cisco and is supported by major email players including IBM, Microsoft, EarthLink and Google

The support of these email providers allows the majority of the world's email accounts to benefit from DomainKeys.

"For nearly 20 years, the bad guys have had an easy way to hide," Yahoo engineer Mark Delany said in a posting on a company blog. "With the widespread adoption of DKIM we can correct that imbalance."

But some industry analysts are sceptical of just how much DKIM will help in the fight against spam and phishing.

Even though DomainKeys has been implemented by the large email providers, Fred Cohen, of security consulting firm Fred Cohen and Associates, warned that the technology would require much wider adoption to make a dent in spam volumes. 

"Unless you want to decline email from everybody who has not adopted DKIM, it is not going to help much," he told vnunet.com.

Cohen suggested that the tide of spam and phishing will not be stemmed by a technological breakthrough, but by consumer behaviour making the practice unprofitable.

"There are certain things about the nature of email that cause it to be what it is," he said. "The economic benefits of spam will not be changed by this or any of the other schemes."

DomainKeys is just one of several proposed anti spam standards. Microsoft is backing its own Sender ID anti-spam standard which requires domain name owners to publish a list of IP addresses that they use to send email.  

It is considered nearly impossible to spoof an IP address, so a mismatch in the sender's domain and IP address is a tell-tale sign that a message is spam.

Sender ID has failed to gather industry support, however, in part because it is covered by several patents owned by Microsoft.  

The software giant has provided a royalty-free licence to the technology to proprietary and open source projects to overcome these hurdles.

AOL started a programme last year that offered guaranteed passage through its spam filters at a fee.  

The move drew sharp criticism from free speech activists because it creates a two-tier system that discriminates against not-for-profits and individual activists.

Tags:

Related whitepapers

Related jobs

Do you agree?

IT white papers

Search vnunet IThound

Top categories

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Watch

Shaun Nichols and Iain Thomson

10 Oct 2008

7.33 MBPodcast Special: Views from the Valley More...

Podcast image

09 Oct 2008

12.99 MBComputing podcast - IT implications of the banking crisis, and the FSA clamps down on IT security More...

Shaun Nichols and Iain Thomson

03 Oct 2008

6.49 MBPodcast Special: Views from the Valley More...

Poll

Google Android

Google Android

Are you intending to try out a Google Android mobile phone?

Previous poll results

Spotlight

Microsoft

Microsoft plans Silverlight 2.0 announcement

Web application tool revamp promised later today   More...

Stock prices

Security disclosures tip the stock market

Events such as Microsoft's Patch Tuesday could be used for...  More...

Blogs

Analyst predicts Web 2.0 fire sale

Prices for online apps could soon plummet, says Forrester   More...

MoD building

Latest data breach leads MPs to demand culture change

MoD admits to losing a hard drive containing up to...  More...

Primary Navigation