Microsoft Anti-Spam Proposal in Merger Talks

Microsoft discusses merging its Caller ID for E-Mail with the popular SPF proposal.

Microsoft is in talks to merge its email authentication scheme, Caller ID for E-Mail, with another plan, SPF, which stands for sender policy framework, ClickZ News has learned. Both standards are aimed at adding the identity element to email, which is seen as a critical first step to fighting spoofing, phishing, and spam.

“We would like to see these things converge,” Ryan Hamlin, general manager of Microsoft’s Anti-Spam Technology and Strategy Group, told ClickZ News. “We’ve been here [standing in one place] for too long. We’re anxious to get moving.”

Discussions between Microsoft and the folks behind SPF have heated up this week at meetings of the Internet Engineering Task Force’s MARID group, and of the Messaging Anti-Abuse Working Group (MAAWG). What’s emerged is something that’s being called “the New SPF,” which merges aspects of both proposals and — critically for marketers — addresses the issue of forged “from” email domains.

“It is still in flux so don’t take it as a fully-baked proposal; but it does lay out some new directions that people in the MARID interim meeting seem reasonably happy with in principle,” wrote Meng Weng Wong, the most well-known force behind SPF, in a discussion list dedicated to the standard. “More than anything I think they’re relieved that we finally have some kind of convergence so the uncertainty goes away.”

The most revolutionary concept to emerge from the proposed convergence is the idea of a new field that would be added to the email “envelope” called “RFROM.” (The “R” stands for responsible.) This field would contain the email address responsible for sending of the message, and it could be checked by a receiving mail system before the email is accepted.

Experts say authentication before an email is accepted is preferable because it puts less of a burden on mail systems. But only fields contained in the “envelope” can be checked that way. Before “RFROM” was proposed, SPF focused on authenticating the bounce address. Such checking might have been helpful, but it wouldn’t have addressed marketer concerns about spoofing and phishing because none of the fields seen by the recipient — like the “from” address — are contained in the envelope.

Microsoft is flying Meng Weng Wong to its Redmond, Wash. headquarters Friday to further discuss the convergence proposal, according to the email guru.

The trip comes on the heels of an eventful week for email authentication. Microsoft submitted its Caller ID for E-Mail specification to the IETF Thursday. Yahoo did the same with its DomainKeys proposal earlier this week. DomainKeys isn’t getting as much attention from the MARID working group as SPF and Caller ID for E-Mail at the moment. It’s seen as a more sophisticated proposal that would take longer to implement, and should therefore be considered further down the line.

“I tend to liken spam to cockroaches,” said Dave Crocker, principal of Brandenburg InternetWorking and a participant in the MARID working group. “You don’t eliminate cockroaches. You get them under control, with multiple techniques.”

Subscribe to get your daily business insights

Whitepapers

US Mobile Streaming Behavior
Whitepaper | Mobile

US Mobile Streaming Behavior

5y

US Mobile Streaming Behavior

Streaming has become a staple of US media-viewing habits. Streaming video, however, still comes with a variety of pesky frustrations that viewers are ...

View resource
Winning the Data Game: Digital Analytics Tactics for Media Groups
Whitepaper | Analyzing Customer Data

Winning the Data Game: Digital Analytics Tactics for Media Groups

5y

Winning the Data Game: Digital Analytics Tactics f...

Data is the lifeblood of so many companies today. You need more of it, all of which at higher quality, and all the meanwhile being compliant with data...

View resource
Learning to win the talent war: how digital marketing can develop its people
Whitepaper | Digital Marketing

Learning to win the talent war: how digital marketing can develop its peopl...

2y

Learning to win the talent war: how digital market...

This report documents the findings of a Fireside chat held by ClickZ in the first quarter of 2022. It provides expert insight on how companies can ret...

View resource
Engagement To Empowerment - Winning in Today's Experience Economy
Report | Digital Transformation

Engagement To Empowerment - Winning in Today's Experience Economy

1m

Engagement To Empowerment - Winning in Today's Exp...

Customers decide fast, influenced by only 2.5 touchpoints – globally! Make sure your brand shines in those critical moments. Read More...

View resource