Google and Yahoo are expanding their use of a successful system for identifying spam.
The move is part of years-long effort to implement a series of checks designed to figure out if an e-mail really has been sent by the domain it purports to come from.
E-mail spoofing has long been a problem since its easy to forge the ‘from’ address, making it more likely the receiver will believe it came from a legitimate source.
By 2 November, Yahoo plans to being using DMARC (Domain-based Message Authentication, Reporting & Conformance) for its ymail.com and rocketmail.com services. Next year, Google also plans to move Gmail to a strict DMARC policy, according to a news release.
DMARC allows email senders to tell receiving services if they are using two other technologies to weed out spam.
Many e-mail senders use DKIM, or DomainKeys Identified Mail, which wraps a cryptographic signature around an e-mail that verifies the domain name through which the message was sent.
The second technology, SPF (sender policy framework), allows e-mail senders to indicate which hosts are authorised to send their e-mail, allowing receiving organisations to discard messages coming from spoofed ‘from’ addresses.
DMARC also allows for some flexibility for e-mail senders, letting them to tell the recipient what to do if some messages aren’t authenticated. Recipients can also tell senders what they’ve done with the messages that didn’t pass muster.
The idea is to dramatically cut down on phishing e-mails, which seek to get people to click on malicious links or reveal personal information.
DMARC has wide industry support and is also used by Facebook and Microsoft.
IDG News Service
Subscribers 0
Fans 0
Followers 0
Followers