Microsoft to embrace SPF anti-spam tools

Microsoft is proposing to merge its latest anti-spam measure with a domain authentication scheme, in order to counter the growing threat of spoofed email addresses from spammers and phishers.

The software giant wants to combine its Caller ID software with a domain authentication scheme devised by Meng Wong, co-founder of email forwarding and hosting company Pobox.com.

Wong, author of SPF, and Microsoft believe that merging the two applications will help detect spoofed email addresses used by spammers and phishers to disguise identities.

This could have a two-fold benefit. As the IP addresses of many spammers are picked up and become known to internet service providers, they can be blocked. Spammers frequently forge address headers to get past current protection.

It would also help combat the growing problem of phishing where criminals forge addresses of financial institutions and retailers in order to trick people into divulging financial and personal information.

Under the proposal, organisations will publish information about their outgoing email servers, such as IP addresses, using XML. The system will be compatible with domains that have already published information in the SPF TXT format.

The combined system would then confirm the sender's domain, and anti-spam filters could be created which could block all messages with 'from' addresses that do not match the actual sending domain.

The proposal, which will be presented to the Internet Engineering Task Force (IETF) standards body in June, has been welcomed by the organisation.

"We are pleased to see Microsoft and the SPF community working together on a unified specification," said Andrew Newton, co-chairman of the IETF working group that handles domain identification issues.

Another rival anti-spoofing specification, DomainKeys, promoted by Yahoo, was submitted to the IETF last week.

See also:

Sender ID loses open source support

Apache Software Foundation among developers shunning Microsoft anti-spam measure  07 Sep 2004

MSN Search claims to freeze out web spam

Microsoft unveils its forthcoming attempt to dethrone Google  11 Jun 2004

Microsoft readies spam-beating technology

Planned authentication system will put burden of proof on the spammer  04 Jun 2004

ITU to hold spam summit

Telcos and ISPs invited to tackle growing menace of junk email  04 Jun 2004

Zombie PCs generate 80 per cent of spam

Majority of junk mail coming from home PCs infected with spam Trojans  03 Jun 2004

Health and finance top spam subjects

Quack cures and get-rich-quick schemes make up most junk mail  27 May 2004

Gates heralds collaborative future

Blogs and 'bottom-up' working to lead the way, predicts Microsoft chief  21 May 2004

Like this story? Spread the news by clicking below:

 del.icio.us     Digg this     reddit!