Slashdot Mirror

← Back to Stories (view on slashdot.org)

IETF Approves SPF and Sender-ID

Posted by Zonk on from the protocols-forward dept.

NW writes "According to the records in the IETF's database (here and here), both the SPF and Sender-ID anti-spam proposals were tentatively approved by the IESG (the approval board of the IETF) as experimental standards. It remains to be seen whether any of them will actually put a dent into spam." At the same time, the FTC has opened a central site about email authentication.

1 of 220 comments (clear)

  1. It's one SMALL step by realmolo · · Score: 5, Interesting

    Both SPF and Sender-ID solve only one problem: faked sender domains.

    That's a problem that needs to be solved, but it doesn't account for a lot of spam, and spammers will just stop faking domains in their mass emails.

    What we need, and what will NEVER happen, is a central database of mailservers. If you aren't in the "registry" of legit mailservers, then other mailservers won't accept your mail. To get in the registry, you'd have to pay a fee, and prove that your server are secure, and that you aren't a spammer. Obviously, each "legit" server would have to append some kind of digital signature to outgoing emails, so that the verification coudl take place.

    In other words, a total revamp of the mail system protocols. ;) We can dream.