[afnog] Specification to address domain spoofing incorporating Microsoft Caller ID for E-Mail and the Sender Policy Framework (SPF)

[Okoegwale Uwagbale Joseph]

from 
http://www.microsoft.com/mscorp/twc/privacy/spam_senderid.mspx

Sender ID
Published: June 23, 2004

The Sender ID draft technical specification has been
submitted to the Internet Engineering Task Force
(IETF) to help address the widespread problem of
domain spoofing, and to provide greater protection
against phishing schemes. The Sender ID specification
is the convergence of Microsoft's Caller ID for E-Mail
proposal and Meng Wong's Sender Policy Framework
(SPF).

Domain spoofing refers specifically to the use of
someone else's domain name when sending a message and
is part of the larger problem of spoofing (the
practice of forging the sender's address on e-mail
messages). Domain spoofing can also be used by
malicious individuals in phisher scams that try to
lure consumers into divulging sensitive information by
pretending the mail is from a trusted party, such as a
consumer's bank.

Sender ID will verify that each e-mail message
originates from the Internet domain it claims to come
from based on the sender's server IP address.
Eliminating domain spoofing will help legitimate
senders protect their domain names and reputations,
and help recipients more effectively identify and
filter junk e-mail.

Send your comments. We are circulating this initial
technical specification for comment because we believe
that your feedback can help make it stronger. Before
sending a response, please make sure that you have
reviewed and that you agree to the terms and
conditions in the full copyright section of the
specification. Please send your questions,
suggestions, and comments to SenderID at microsoft.com.

If you are a software developer and are interested in
implementing this specification in software, please
review the terms of the Caller ID for E-Mail
Implementation License before you begin, as the patent
license discusses the rights that Microsoft would
grant you or your organization. Please note that a
license agreement is not required for individuals,
companies, or ISPs who only wish to publish their
Sender ID records. If you want more information on
implementing SenderID in your organization, please
send an e-mail to SenderID at microsoft.com.



=====

"A minority of input produces the majority of results." 
-Pareto Principle (the 80:20 rule)

 







		
__________________________________
Do you Yahoo!?
New and Improved Yahoo! Mail - Send 10MB messages!
http://promotions.yahoo.com/new_mail 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: senderid.pdf
Type: application/pdf
Size: 94855 bytes
Desc: senderid.pdf
Url : http://listserv2.cfi.co.ug/mailman/private/afnog/attachments/20040629/c9c3abfc/senderid-0001.pdf