On Saturday, 2 בJuly 2005 22:20, Stanislav Malyshev wrote:
> I think the problem is not technical here - I can think of a few
> methods to implement sender verification with minimal adjustment to
> existing protocols and with introducing entirely new ones. The
> problem here is that until the significant part of the email-sending
> crowd does not use that method, whatever it be, you can not reliably
> filter your email based on this method. 

> Now, there are two obvious ways out of this vicious circle:
...
> 2. Adoption of the protocol by some company like Microsoft or IBM
> that can make anything an industry standard.

Microsoft has announced that starting this November (11/2005) Hotmail 
will implement Sender ID(*) notifications to clients - when an email is 
received w/o Sender ID verification the user will be displayed with a 
warning bar. I'm assuming this is kind of adoption you were thinking 
of ?

Now its not clear whether hotmail will mark email that declare themself 
to come from a Sender ID supporting domain but fail the verification, 
or also from any domain that does not support Sender ID, and how is the 
original SPF (SPF 0.9 ?) plays into it. At any rate, its probably a 
test before implementing this behavior into Outlook and regardless is 
probably a step in the wrong direction, mainly as MS are known to do 
only things that promote their proprietary protocols and not others. 
IBM is probably not much different. So unless you want your SPAM 
solution in the form of a proprietary protocol controlled by a company 
and then bought by MS, I don't think going this way is a good idea.

(*) Sender ID was the "next generation" SPF which was rejected by IETF 
for various reasons, probably the most important was problematic and 
unclear licensing terms.

-- 
Oded

::..
Charm is a way of getting the answer "Yes" -- without having asked any 
clear question.

================================================================To unsubscribe, 
send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Reply via email to