CircleID

Comments

Why DomainKeys is Broken

• Comment posted Oct 27, 2004 7:10 pm PDT — by Daniel Golding
  One issue is - when is Domino actually changing the headers? A normal domainkeys scenerio would be that cryptographic authentication would occur at receipt by the mailserver, before any headers were altered. Also, there are plenty of good reasons why…

Sender-ID Back from the Dead

• Comment posted Nov 01, 2004 5:14 am PST — by Daniel Golding
  hmm. An unsolicited advertisement in the comments! What delicious irony :) Yakov, I guess that when I think of "Internet infrastucture", routers come to mind, not mail servers :) At any rate, there are plenty of OSS MTAs out there.…

• Comment posted Oct 28, 2004 3:45 pm PDT — by Daniel Golding
  The IETF has failed the entire community during this process. They have literally slept while Rome has burned - the spam problem is far from new. I predict adoption of both SPF and Sender-ID by most ISPs and enterprises over…

AOL Fires Across the Bow of Spam-Friendly ISPs

• Comment posted Nov 04, 2004 8:50 pm PST — by Daniel Golding
  Need to use an outside mail server? That's easy to do with SMTP-Authorization running on the SMTP Submission Port, TCP port 587. This can also be accomplished by using SMTP-AUTH with TLS (aka SSL). Other alternatives include SSL and IPSec…

Phish-Proofing URLs in Email?

• Comment posted Apr 23, 2005 3:17 am PDT — by Daniel Golding
  Banks should simply not include links in their communications. If a bank or other institution must communicate via unencrypted email, they should simply say "visit our secure website for a message", with no link at all. If we have online…

Could IP Addressing Benefit from the Introduction of Competitive Suppliers?

• Comment posted Apr 23, 2005 3:09 am PDT — by Daniel Golding
  Geoff and Suresh have said it well - this is essentially a blind power grab by the ITU. You can't have competition amongst what are basically regulatory organizations - you just get more regulators. The RIRs are membership organizations, not…

IP Address Allocation vs. Internet Production I: Understanding the Relationship, and the Differences

• Comment posted May 24, 2005 3:43 am PDT — by Daniel Golding
  Facts to dispel pernicious addressing myths - this article is an excellent addition to CircleID. If only this could be mass-emailed to IPv6 proponents and ITU participants :) Great job, Tom.

Address Policies

• Comment posted May 24, 2005 3:40 am PDT — by Daniel Golding
  The irony is that the RIRs are well run, for the most part. ICANN, the ITU and other more normative International organizations are, on the other hand, not in the same ball park, especially in terms of effectiveness. Where is…

Phishing: An Interesting Twist on a Common Scam

• Comment posted Jun 01, 2005 7:03 pm PDT — by Daniel Golding
  What the author described is an illegal intercept (basically, a wiretap), rather than phishing, which occurs out of band to the enterprise. Its a bad idea to try to conflate these terms. Security engineers and "experts" think they understand networking.…

An Infrastructure TLD: Avoiding the Side Effects of Today's .Net

• Comment posted Jun 01, 2005 6:59 pm PDT — by Daniel Golding
  I agree with Joe - this is a solution in search of a problem. Although, I will say this - I'm not sure ARPA can be considered purely infrastructure anymore with the advent of ENUM. In any event, .net can…

SPF Loses Mindshare

• Comment posted Aug 03, 2005 2:34 am PDT — by Daniel Golding
  Until DKIM is ready to go (and by that, I mean supported by major MTAs and anti-spam vendors), SPF and Sender-ID are our best bets. The ethic of waiting for a perfect solution has consistantly failed our standard bodies. Imperfect…