Hide Techdirt is off for the long weekend! We'll be back with our regular posts tomorrow.

On Second Thought, Why Not Just Ditch Sender Authentication Altogether

from the just-ditch-'em-all dept

ZaneK writes “The SPF Council has requested that the IETF revoke its support for the Sender ID SMTP authentication experiment because Sender ID conflicts with SPF in ways that can cause false positives. Because of their bickering, the IETF may pull support for both proposals. This may not matter, since, so far, spammers are the biggest beneficiaries of both SPF and Sender ID.” What? A standards battle over pretty much useless technology? Who could have predicted that?

Rate this comment as insightful
Rate this comment as funny
You have rated this comment as insightful
You have rated this comment as funny
Flag this comment as abusive/trolling/spam
You have flagged this comment
The first word has already been claimed
The last word has already been claimed
Insightful Lightbulb icon Funny Laughing icon Abusive/trolling/spam Flag icon Insightful badge Lightbulb icon Funny badge Laughing icon Comments icon

Comments on “On Second Thought, Why Not Just Ditch Sender Authentication Altogether”

Subscribe: RSS Leave a comment
Pete Austin says:

SPF is better than nothing

In particular, it makes life more difficult for mass-mailing worms. Unfortunately it’s *not* a perfect guarantee that email comes from the alleged sender, despite claims that is is. My understanding is that email malware can bypass SPF by spoofing both the sending domain and the sending IP address. However it then won’t receive the SMTP replies from recipients, which makes mail-sending more complex and less certain.

How SPF Works, Why Sender ID is a non-starter, Analysis of Microsoft’s MARID Patent Applications.

Add Your Comment

Your email address will not be published. Required fields are marked *

Have a Techdirt Account? Sign in now. Want one? Register here

Comment Options:

Make this the or (get credits or sign in to see balance) what's this?

What's this?

Techdirt community members with Techdirt Credits can spotlight a comment as either the "First Word" or "Last Word" on a particular comment thread. Credits can be purchased at the Techdirt Insider Shop »

Follow Techdirt

Techdirt Daily Newsletter

Techdirt Deals
Techdirt Insider Discord
The latest chatter on the Techdirt Insider Discord channel...