TagDKIM

October 2, 2012

Return Path partners with Symantec

By laura

1 Min read

Add comment

02October

Today Return Path announced a partnership with Symantec to improve their anti-phishing product. Return Path is incorporating the Symantec Trusted Domain List into their authentication and filtering product to help customers protect their brands. Press Release Phishing scams affect everyone, and having a brand that is used in phishing can reduce consumer trust in that brand. Protecting brands in...

January 31, 2012

DKIM deployment challenges

By laura

1 Min read

Add comment

31January

Cloudmark has an interesting blog post pointing out some of the challenges of signing mail with DKIM in a large company with a diverse mail system.

January 30, 2012

DMARC: an authentication framework

By laura

1 Min read

1 comment

30January

A new email industry group was announced this morning. DMARC is a group of industry participants, including large senders, large receivers and relevant intermediaries working on a framework to reduce the harm from phishing. DMARC is working on a standard to allow senders to publish sending policies and receivers to act on those policies. Currently, senders who want receivers to not deliver...

September 29, 2011

Links Sept 29, 2011

By laura

1 Min read

Add comment

29September

Al Iverson has a post up about his experiences with customers who try to acquire email addresses through appending.
J.D. Falk has a post up about the history of DKIM.

September 26, 2011

DKIM is Done

By steve

5 Min read

Add comment

26September

This was posted to the IETF DKIM Working Group mailing list this morning: The dkim working group has completed its primary charter items, and is officially closing. The mailing list will be retained for future discussions involving dkim. The list archive will also be retained. The dkim working group was primarily focused on DomainKeys Identified Mail (DKIM) Signatures and DomainKeys Identified...

July 21, 2011

Gmail and the via

By laura

2 Min read

9 comments

21July

I was hoping to have a detailed post up today about the conditions where gmail presents the user with a “via” but time seems to have gotten away from me. But I can give you the conclusions. A via is presented to the user when you have a DKIM pass and the domain in the d= does not match the domain in the visible from address. In this case the interface shows via the d= domain. A via is...

June 30, 2011

Gmail shows authentication data to the recipient

By laura

2 Min read

7 comments

30June

Yesterday Gmail rolled out some changes to their interface. One of the changes is that they are now showing end users authentication results in the user screen. It’s really the next step in email authentication, showing the results to the end user. So how does Google do this? Google is checking both SPF and DKIM. If mail is authenticated and the authentication matches the from address then...

June 30, 2010

ESPs, Non-portable Reputation and Vendor Lock-in

By steve

7 Min read

1 comment

30June

I’ve seen some mentions recently of ESPs suggesting that if you use your own domain in the From: of mail you send through an ESP then that ESP can’t “do email authentication” properly unless they require you to edit your domains DNS settings. That’s not really so, but there is a kernel of truth in there. The real situation is, unsurprisingly, a bit more complicated...

June 18, 2010

Link roundup June 18, 2010

By laura

2 Min read

2 comments

18June

Hotmail has released a new version of their software with some changes. Return Path discusses the changes in depth, but there are a couple that senders may find helpful. If a user deletes a mail without reading it multiple times, Hotmail asks the user if they want to unsubscribe from the mail. Users can use a the new “sweep” feature to delete or file multiple emails easily Finally...

June 2, 2010

Who can you trust?

By laura

2 Min read

1 comment

02June

I’ve been recently dealing with a client who is looking at implementing authentication on their domains. He’s done a lot of background research into the schemes and has a relatively firm grasp on the issue. At this point we’re working out what policies he wants to set and how to correctly implement those policies. His questions were well informed for the most part. A few of them...