Comments on: Promising antispam technique gets nod
Internet Engineering Task Force approves a technique designed to put junk e-mailers out of business forever.
Most Popular
Latest tech news headlines
- PC Tools Internet Security 2010 reviewed
December 4, 2009 6:13 PM PST
- Report: MySpace to adopt Facebook Connect
December 4, 2009 4:56 PM PST
- Sources: Apple wants technology from struggling Lala
December 4, 2009 4:25 PM PST
- See all headlines
RSS Feeds
Add headlines from CNET News to your homepage or feedreader.
More feeds available in our RSS feed index.
- Markets
Related quotes
Unless it gets to the point that sites only accept mail form DK-enabled sites, you won't have a problem. Even if it comes to that, there are plenty of "How-To's" on the net for setting up DK for your domains (if you're clued enough to be able to run your own mail server, you should be clued enough to figure out how to set up DK).
That said, it should be interesting to see what kind of load key-verification will put on a mail system.
-tom
Signal Spam
Whitelists are better, even though they have the potential of annoying legit users.
Why screw around with all this spam BS and filters and rules... whatever.
It takes a few minutes and all the e-mail providers can fix this problem tomorrow.
Two words: WHITE LIST.
If you don't know what that is or how it functions do a search and read.
In a nutshell; you have a list of e-mail addresses(white list) where you allow the mail to land in your inbox. All others.... you don't even see.
Nothing to delete, filter and all those BS things people do nowdays.
If none of the spam comes in, obviously there is no money to send it. Spam can be elliminated within a week if everyone using a white-list.
Yahoo, Google and others could provide a white list function but they don't want to. You have to ask them why. It's just plain stupid.
I started a webmail service with a white-list function, but the software kinda slow. If you're interested to see how that works, check out the site: www.webmail-usa.com
It's free and no ads or promo.
>> white list function but they don't want to. >> You have to ask them why. It's just plain
stupid.
No they're not stupid. White list works OK for communicating with 'Friends and family'. But what about commercial websites, and 'contact us' emails you find in most of the websites?
By using digitial signature I think they're trying to fix the problem at the root itself, which is good.
-tom
Over 75% of the mail we receive is one time messages from customers. We certainly don't want them to jump through hoops if they are trying to reach the order desk or customer service.
And the majority of the mail we send out are automated order confirmations or acknowledgments.
Therefore, if a customer is using an ISP or system that requires some kind of response before delivering those messages, then they just won't receive their mail. There is no standard way of responding to a whitelist so we can't automate the process.
I use GMail, and spam is pretty much non-existent. Maybe 1 in a 200 spam emails will get through. Hotmail on the other hand, is 2nd grade (as are most Microsoft products). I still have an old Hotmail account, and it just fills up with spam constantly.
If spam bothers you, get a GMail account. www.gmail.com
Today, it costs them effectively nothing to send millions of messages. If the hit rate of someone who buys something is .01%, who cares, they still make money.
If a system were devised that charged $.0001 per email sent and ISP's played along by giving most "retail" users 10000 messages per month and large (legitimate) corporations (who sign up for some kind of authentication like DKIM) unlimited messages then the finances turn upside down and the profit for spamming goes away, or they at least get much more selective in who they send to.
Me, I can't see the arms race stopping since every technology used will have some form of hack that breaks the system (cryptology included, tell the folks from the MPAA that crypto systems are uncrackable) The solution has to lie in the financial equation.
-bill
1. People are used to free email. Not many people are willing to pay for e-mail, even if it is a fraction of a cent. Besides, if email providers were to start charging for email, the price would undoubtedtly increase with time. In time, it would come to be like snail mail, where you might spend $7 for a few stamps.
2. So who does the money go to? Microsoft? Yahoo? Both? The problem with charging for one of the basic internet services is that, the most successful company gets to call the shots. A chance for monopoly exists. Such a monopoly could compromise the open nature of the Internet.
At least that's the way I see it.
-tom
I dont know whether domainkeys can be a solution to prevent spams when already they are being used in spam mails.
Once Domainkeys is more widely adopted then people will be able to easily build blacklists or white lists that cannot be bypassed since forged email will be a lot more difficult.
We are still in phase 1, trying to get a larger percentage of the Internet to use Domainkeys so the system can become useful.
Right now you can only use it to be certain that a message is forged.
Use one of the free email addresses whenever you're filling out a form on the web. Then the spam goes to that account, and you don't have to be bothered with it.
Plus I've created a couple of email accounts that never were used but which filled up with spam.
You may make your email address more likely to be spammed but it appears that there is more to it than just that.
-tom
There are plenty of infected Windows PCs running malware that
harvests email addresses from address books, mail files, etc. and
spreads them around. All you have to do is have your email address
in such a person's address book, or merely have a message in their
mailbox file for it to be harvested for spam.
I use a Hotmail account to use to sign up for almost everything. I figure MS deserves to hold my spam.
So far we havent done that good a job well atleast i get junk mail i find usless reather often and such.
It's much more narrowly targeted to someone that at least has a possible interest in the category. I don't give a rats a** about fake rolexes (nor real ones either, but that's another story) and would never buy one. No bulk mailing (of paper) would ever target me for such stuff, it costs too much.
BTW, junk mail does to some extent subsidize the cost of other first class mail. It's delivered pre-sorted to the PO which costs considerably less than the regular mail. So to some extend, junkmail is GOOD for the people who use other fist class mail services. Whereas spam is just bad for everyone.
Again, no technology solution will ever work (in my mind). The only way to win is to wage a financial war.
Traslation: You're still going to get spam but just from the people we do business with.
-tom
It was submitted as an RFC, but it hasn't been approved even in a preliminary fashion.
Train your users to STOP typing their email address into websites, and let them know that THEY'LL have to deal with the spam if they get it.
Also, spammers try all combinations of email addresses hoping to get real ones. Why not - email is basically free to send. Especially when you're sending it from a compromised machine. Several times now I've created email addresses and had spam in them before I ever gave the address out.
While its not wise by any means to give out your email to anyone who asks, its certainly not the only way for the email address to get out. And once it gets out, it's out for good!
if this thing can find it's way around getting shut out of forums, an email version could probly be made too:(
I trashed the message, so can't corroborate my statement with evidence. Oh well.
Last time I had a Niger offer, I fwd: that to my ISP and surprise (NOT!) there was no reply.
Meanwhile, only this morning, I received another kneejerk from a known contact -- her msg with 25 addys in the To: field no doubt spawned thousands of panic follow-ons about the dread "Olympic torch" virus threat. *sigh*
Such people never learn, no matter how many times you tell them it takes only seconds to google about suspect threats.
The nature of email and the internet means that spam and other threads will always be there in some form.. we can only aim to reduce it's impact on our day to day lives. :)
How will receivers get that? Do they use a trusted third party? I'd imagine they need to---if the public key is in the email, the DKIM method offers no security because any spammer could create a public key and sign the message.
The assumption is that a spammer looking to forge the from would not be able to change the DNS record for a domain.
It should actually be no problem for ISPs to spot
sudden unusual outgoing email activity, and shut down
that connection and inform the person that they need to clean
up the machine, and only then let them get back on-line.
If ISPs were serious about this, spambots would loose their
appeal.
But there are probably enough "disinterested" ISPs out there,
that want their money no matter what goes through their cables.
However, these would probably be not Major ISPs. If
lots of SPAM comes through a particular route, the
large ISPs could block that.
Indeed Verizon at one point disrupted email from Europe
to the USA by blocking major parts of it - claiming it
as SPAM. This is of course ridiculous.
But serious efforts on the part of ISPs to stem Spam
at the source would definitively help.
As long as these companies ARE behind it and Microsoft is NOT... it's bound to be a winner. (* CHUCKLE *)
Walt
I disagree. Until there is a native implementation in Microsoft Exchange that can be enabled in a few clicks we Domain Keys won't go too far.
Too many enterprise live and die by their exchange servers.
- Yahoo has uses domain keys?
- by morningowl May 24, 2007 8:44 AM PDT
- Then why do I still get tons of spam in my yahoo account from other yahoo accounts? As a matter of fact I get spam from alleged yahoo accounts in all of my email accounts. I have accounts with Gmail, Yahoo, Earthlink, Hotmail....The only one that seems to have limited spam is Earthlink....Gmail's filters catch a lot, but on a daily basis I have 30-50 spam messages in my Gmail spam folder...with Earthlink, I rarely get spammed at all.
- Like this Reply to this comment
-
Showing 1 of 2 pages (76 Comments)