AOL To ESPs: Comply with SPF, Or Else

  |  June 9, 2004   |  Comments

America Online plans to have SPF e-mail authentication in place by the end of summer and bulk mailers not in compliance will lose their whitelisting status.

America Online plans to have SPF email authentication in place by the end of summer and email service providers (ESPs) not in compliance will lose their whitelisting status.

SPF, or Sender Policy Framework, authenticates the identity of the sender of an email. Since most spam has faked addresses, SPF could be a powerful weapon in fighting spam, spoofing [define] and phishing [define].

ESPs are scrambling to comply with the AOL edict.

"Many ESPs have already complied," said Dave Lewis, co-chair of the E-Mail Service Provider Coalition (ESPC) vendor relations committee and VP of deliverability management for Digital Impact. Lewis said his firm is in the process of complying, as is another major ESP, Bigfoot Interactive, a spokesman confirmed. Other firms, such as EmailLabs and Socketware, are already in compliance.

Compliance is not a demanding process. The entity in question need only publish information such as its IP address or addresses in a specified format within the Domain Name System (DNS). [define]

"If individual companies, corporations, organizations and so forth want to remain on AOL's whitelist they will want to establish an SPF record for their domain since AOL will soon begin to query IP addresses that are on our whitelist from a domain SPF record," said Nicholas Graham, AOL spokesman.

Graham said the giant ISP will begin using SPF to maintain its whitelist in the short-term future, with August being within a potential timeframe. Carl Hutzler, director of anti-spam operations for AOL mail operations, put it more simply: "End of summer if I can get developers to do their magic."

SPF works by comparing the identifying information of an incoming email with the information on file with the DNS to see if they match. This authenticates the identity of the sender by checking information in the email "envelope."

However, because SPF doesn't authenticate any of the headers actually seen by the end user -- the "from" address, for example -- some are pushing for other protocols. Microsoft, for example, is in the process of integrating SPF with its own Caller ID for E-Mail authentication protocol to enable checking of the fields seen by the end user. Meanwhile, Yahoo has its own authentication proposal, DomainKeys, which uses encryption of digital signatures.

While SPF will not eliminate spam, it "will make a big difference in a positive way," according to John Mathew, VP of operations for Bigfoot Interactive.

Or, as Digital Impact's Lewis put it, "We're not able to score the touchdown on the first play. But these two forms of authentication [SPF and DomainKeys] will get us a goodly way up the field."

ClickZ Live Toronto Twitter Canada MD Kirstine Stewart to Keynote Toronto
ClickZ Live Toronto (May 14-16) is a new event addressing the rapidly changing landscape that digital marketers face. The agenda focuses on customer engagement and attaining maximum ROI through online marketing efforts across paid, owned & earned media. Register now and save!*
*Early Bird Rates expire April 17.

ABOUT THE AUTHOR

Janis Mara

COMMENTSCommenting policy

comments powered by Disqus

ClickZ Today is our #1 newsletter.
Get a daily dose of digital marketing.

COMMENTS

UPCOMING EVENTS

Featured White Papers

ion Interactive Marketing Apps for Landing Pages White Paper

Marketing Apps for Landing Pages White Paper
Marketing apps can elevate a formulaic landing page into a highly interactive user experience. Learn how to turn your static content into exciting marketing apps.

eMarketer: Redefining Mobile-Only Users: Millions Selectively Avoid the Desktop

Redefining 'Mobile-Only' Users: Millions Selectively Avoid the Desktop
A new breed of selective mobile-only consumers has emerged. What are the demos of these users and how and where can marketers reach them?

Jobs

    • Contact Center Professional
      Contact Center Professional (TCC: The Contact Center) - Hunt ValleyLooking to join a workforce that prides themselves on being routine and keeping...
    • Recruitment and Team Building Ambassador
      Recruitment and Team Building Ambassador (Agora Inc.) - BaltimoreAgora, www.agora-inc.com, continues to expand! In order to meet the needs of our...
    • Design and Publishing Specialist
      Design and Publishing Specialist (Bonner and Partners) - BaltimoreIf you’re a hungry self-starter, creative, organized and have an extreme...