Spam
DomainKeys attaches an encrypted digital signature unique to the sender to each email

DomainKeys approved as anti-spam standard

Yahoo/Cisco technology aims to prevent spoofing

Shaun Nichols in California

The Internet Engineering Task Force has granted preliminary approval to DomainKeys Identified Mail (DKIM). 

The industry standard promises to curb spam by preventing spoofing, the forging of the sender's email address to make it appear as if the message originated from a reputable company instead of a spammer.

Advertisement

DomainKeys attaches an encrypted digital signature unique to the sender to each email when it is sent. If the sender's address does not match the signature it can be discarded as spam.

The technology was pioneered by Yahoo and Cisco and is supported by major email players including IBM, Microsoft, EarthLink and Google

The support of these email providers allows the majority of the world's email accounts to benefit from DomainKeys.

"For nearly 20 years, the bad guys have had an easy way to hide," Yahoo engineer Mark Delany said in a posting on a company blog. "With the widespread adoption of DKIM we can correct that imbalance."

But some industry analysts are sceptical of just how much DKIM will help in the fight against spam and phishing.

Even though DomainKeys has been implemented by the large email providers, Fred Cohen, of security consulting firm Fred Cohen and Associates, warned that the technology would require much wider adoption to make a dent in spam volumes. 

"Unless you want to decline email from everybody who has not adopted DKIM, it is not going to help much," he told vnunet.com.

Cohen suggested that the tide of spam and phishing will not be stemmed by a technological breakthrough, but by consumer behaviour making the practice unprofitable.

"There are certain things about the nature of email that cause it to be what it is," he said. "The economic benefits of spam will not be changed by this or any of the other schemes."

DomainKeys is just one of several proposed anti spam standards. Microsoft is backing its own Sender ID anti-spam standard which requires domain name owners to publish a list of IP addresses that they use to send email.  

It is considered nearly impossible to spoof an IP address, so a mismatch in the sender's domain and IP address is a tell-tale sign that a message is spam.

Sender ID has failed to gather industry support, however, in part because it is covered by several patents owned by Microsoft.  

The software giant has provided a royalty-free licence to the technology to proprietary and open source projects to overcome these hurdles.

AOL started a programme last year that offered guaranteed passage through its spam filters at a fee.  

The move drew sharp criticism from free speech activists because it creates a two-tier system that discriminates against not-for-profits and individual activists.

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Tags:

Do you agree?

Further reading

Spam

Talk Talk most spam-targeted UK ISP

Provider ties with Force9 at 95 per cent junk mail

Experts warn of botnet-driven spam deluge

New focus from blended attacks

Corporate spambots named and shamed

Fortune 500 companies under the spotlight

DomainKeys approved as anti-spam standard

Yahoo/Cisco technology aims to prevent spoofing

Related whitepapers

Related jobs

Most watched

iPhone

Video Review: iPhone 3GS

We put Apple's latest iPhone through its paces

Xperia X1

Video Review: Sony Ericsson Xperia X1

First Looks Editor Ian Williams gets hands on with the Sony Ericsson Xperia X1

IT white papers

Search white papers

Top categories

Poll

Poll: Summer smartphones

Poll: Summer smartphones

Which smartphone will you be taking to the beach this summer?

View poll results

Advertisement

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Spotlight

a padlock

Microsoft to plug security holes

Microsoft has given advance warning of a number of security...

Nokia handset

Top 10 articles, 10 July 09

No Nokia Android phone, ActiveX attacks and Google enters into...

Can Google beat Microsoft at its own game?

Google's announcement this week that it plans to step into...

iPhone

Video Review: iPhone 3GS

We put Apple's latest iPhone through its paces

Primary Navigation