shahine.com/omar/

homepage | Send mail to the author(s) contact

yet another Microsoft blogger

# Thursday, July 14, 2005

Sender ID

There is a LOT of FUD about Sender ID. I was happy to read this Forbes Article which does a great job at explaining the current situation around "email authentication" which basically means technologies such as Sender ID and Domain Keys.

The IETF has not yet endorsed either specification as an industry standard, but e-mail authentication is a hotly debated topic in the industry. Because the authentication approaches are different, system administrators do not have to choose which specification to follow--they can use both simultaneously.

Tripp Cox, chief technology officer of Internet service provider EarthLink has been testing both and says of the two proposals, “We found they are complimentary technologies, but doing different things.”

As Tripp said, these technologies are complementary. You can use both, and the work in concert to deliver different but valuable information about the origins of the email.

Sender ID does have some drawbacks, most notably if you forward mail from one account to another (such as from a university alumni account to hotmail) you can get a false positive. However, these things can be mitigated. To be fair, Sender ID does work well at identifying fraudulent fishing mail. eBay and Paypal both benefit from this.

As a reminder, you can read all about our anti-spam efforts here.

 

Friday, July 15, 2005 1:27:12 PM (Pacific Daylight Time, UTC-07:00)
Hey Omar! I agree, that Forbes article is one of the best to date -- both politically and technically accurate (or at least not glaringly wrong.)

Some additional good, non-FUDdy info about SenderID & SPF is in this MAAWG white paper: http://www.maawg.org/about/whitepapers/spf_sendID/ .
J.D. Falk
Friday, July 15, 2005 1:31:13 PM (Pacific Daylight Time, UTC-07:00)
Hi J.D.

Thanks for the link!
Wednesday, August 03, 2005 2:15:38 AM (Pacific Daylight Time, UTC-07:00)
Thanks for this info. I also did a post on my blog - but didnt know the inside details of SecureID.
Comments are closed.