On Second Thought, Why Not Just Ditch Sender Authentication Altogether

from the just-ditch-'em-all dept

ZaneK writes "The SPF Council has requested that the IETF revoke its support for the Sender ID SMTP authentication experiment because Sender ID conflicts with SPF in ways that can cause false positives. Because of their bickering, the IETF may pull support for both proposals. This may not matter, since, so far, spammers are the biggest beneficiaries of both SPF and Sender ID." What? A standards battle over pretty much useless technology? Who could have predicted that?

2 Comments | Leave a Comment..


If you liked this post, you may also be interested in...
 

Reader Comments (rss)

(Flattened / Threaded)

  1.  

    SPF is better than nothing

    identicon
    Pete Austin, Sep 5th, 2005 @ 5:41am

    In particular, it makes life more difficult for mass-mailing worms. Unfortunately it's *not* a perfect guarantee that email comes from the alleged sender, despite claims that is is. My understanding is that email malware can bypass SPF by spoofing both the sending domain and the sending IP address. However it then won't receive the SMTP replies from recipients, which makes mail-sending more complex and less certain.

    How SPF Works, Why Sender ID is a non-starter, Analysis of Microsoft's MARID Patent Applications.

    reply to this | link to this | view in thread ]

  2.  

    Buy a clue?

    identicon
    Matthew Elvey, Sep 13th, 2005 @ 1:36am

    Duh, authentication is only useful in conjunction with a reputation service. Large ISPs run their own; smaller mail receivers use public ones like cloudmark's or senderbase's.
    CSV makes this clear; the reputation check is part of the protocol.

    reply to this | link to this | view in thread ]


Add Your Comment

Have a Techdirt Account? Sign in now. Want one? Register here
Get Techdirt’s Daily Email
Save me a cookie
  • Note: A CRLF will be replaced by a break tag (<br>), all other allowable HTML will remain intact
  • Allowed HTML Tags: <b> <i> <a> <em> <br> <strong> <blockquote> <hr> <tt>


A word from our Sponsors...
Follow Techdirt
Flattr rss rss
From the Techdirt Archive...
A word from our Sponsors...

Close

Email This