Re: Thinking outside the box

Paul Smith <[email protected]> Mon, 18 Mar 2013 20:40:53 +0000
Newsgroups gmane.ietf.asrg
Message-ID <[email protected]>
On 18/03/2013 20:16, Steve Atkins wrote:
> On Mar 18, 2013, at 1:12 PM, Barry Shein <[email protected]> wrote:
>
>> P.S. One can also cryptographically sign email of course but that
>> hasn't caught on, way too complicated?
> Have you heard of DKIM? If not, you should take a look at it.
>
There are problems with DKIM, such as it being complicated, easy to 
trash, gets messed up by forwarding etc.

Not saying it's not got its place, but it's not a panacea, and it's 
complexity puts people off. I know I've had users ask about it, and once 
I tell them what they need to do (which isn't much), they tend to think 
it's not worth it.

Also, DKIM isn't an anti-spam method, it's an anti-forgery method.

Cryptographically signing email isn't an anti-spam method either. 
Encrypting email using a public key could be an anti-spam method (eg 'I 
will only accept mail encrypted with my public key, and I will only tell 
people I trust my public key'), but it would be too hard to give people 
a public key.



-

Paul Smith Computer Services
Tel: 01484 855800
Vat No: GB 685 6987 53