Computerworld
Yahoo and Cisco to submit e-mail ID spec to IETF
Yahoo and Cisco will submit an e-mail authentication spec to the IETF on Monday, hoping it will become a standard.
Juan Carlos Perez (IDG News Service)  12 July, 2005 09:23

Yahoo and Cisco Systems plan to announce Monday they will submit their e-mail authentication specification, DomainKeys Identified Mail (DKIM), to the Internet Engineering Task Force (IETF) to be considered as an industry standard.

Discussions on DKIM will begin at the IETF meeting in Paris scheduled to run between July 31 and August 5, Yahoo and Cisco officials said.

DKIM combines Yahoo's DomainKeys and Cisco's Internet Identified Mail, two e-mail authentication technologies developed separately, which the companies announced in June they would combine with the intention of licensing the resulting specification royalty-free throughout the industry.

DKIM is designed to give e-mail providers a mechanism to verify the origin of e-mail messages and thus combat spoofing. Spammers use spoofing to change an e-mail message's header information to deceive recipients into believing the message was sent by a known and trusted personal acquaintance or a legitimate business, such as a bank or an online store.

Very often, spammers' ultimate goal with spoofing is to trick recipients into revealing confidential information, such as social security numbers, bank account information and passwords, in scams often referred to as "phishing."

Yahoo and Cisco are designing DKIM to be as compatible as possible with DomainKeys, so that migration to DKIM will be smooth for organizations that have already implemented DomainKeys, said Jim Fenton, who holds the title of Distinguished Engineer at Cisco.

"We have made a real effort to preserve the investment in infrastructure that people who have implemented DomainKeys have made," Fenton said.

Cisco announced its Internet Identified Mail specification in June of last year, but it's unpublished, so there have been only three prototype implementations made: an internal one at Cisco and two external ones, Fenton said.

The companies decided to combine their cryptographic technologies because they found them to be very similar and "we didn't feel we needed to have two technologies that did the same thing," Fenton said.

DomainKeys has been more widely tested and adopted, and Yahoo receives about 350 million e-mail messages signed with it every day, said Miles Libbey, Yahoo's antispam product manager.

Computerworld Buyer's Guide - Vendors Matched to this Article

Comments

Post new comment

Login or register to link comments to your user profile, or you may also post a comment without being logged in.
The content of this field is kept private and will not be shown publicly.
Enter the fully qualified URL, eg. http://www.example.com/
  • Web page addresses and e-mail addresses turn into links automatically.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.

More information about formatting options

Add to Google
Computerworld Buyer's Guide - Vendors Matched to this Article
Zones
Zone logoZones provide focussed content from Computerworld and leading technology partners.
Newsletter Subscription
Newsletter Subscription
Sign up for our Computerworld newsletters!
Syndicate content
 

Computerworld Webinar

Thursday, June 11th, 2009
10:30am EST (Sydney, Australia)
Screening at your PC

Computerworld is hosting a 30 minute live webinar to help you to learn how unified communications can save you money, foster innovation and business agility by making it easier for people to find, reach and collaborate with one another.

Register Now

Whitepaper

The business justification for data security

In the information security world we face two major types of threats: "noisy" threats which directly interfere with our ability to do business and "quiet" threats which cause real damage, but don't necessarily prevent people from doing their jobs. Read on to discover how to combat both types of threats and to justify the use of data security within your business.

Enterprise IT Buyer's Guide
Find Technology Vendors Fast
 
Find vendors by name | Find by category
Sponsored Links
 
Send Us E-mail | Privacy Policy
Features List | Media Kit | Advertising | Contact Us

Copyright 2009 IDG Communications. ABN 14 001 592 650. All rights reserved.
Reproduction in whole or in part in any form or medium without express written permission of IDG Communications is prohibited.