- Microsoft will float cloud OS this month
- Top 16 Chinese iPhoneys
- Pimp your ride: Cool car technology
- Laptop stolen from McCain campaign
- Cisco, Microsoft roll out server, networking appliance
Newsletters | Podcasts | Chats | Opinions | RSS Feeds | This Week In Print | IT Careers | Community | Reports | Downloads | Slideshows | New Data Center
Partner Sites:Application Performance Solutions | App Performance | Networking Solution | SafeGuard Enterprise Solution Center | SOA | Value of WDS
E-mail fraud is a global problem that plagues consumers and businesses, costing millions of dollars in direct losses, technology expenditures, lost productivity and network downtime. With phishing attacks on the rise, leading companies are working to develop e-mail authentication protocols that protect users from e-mail fraud.
DomainKeys Identified Mail (DKIM) is an e-mail authentication proposal that strengthens user protection from e-mail forgery, and increases accountability for spam and phishing scams. DKIM defines a domain-level authentication framework for e-mail using public key cryptography and key server technology to permit verification of the source and contents of messages by mail transport agents or mail user agents. The goal of this framework is to prove and protect message sender identity and the integrity of the messages they convey, while retaining the functionality of Internet e-mail as it's known today.
The specification merges Yahoo's DomainKeys and Cisco's Internet Identified Mail e-mail verification technologies, which have similar attributes. Cisco and Yahoo submitted the combined technology to IETF last month for consideration as an e-mail industry standard and to help enable industry-wide adoption of the technology.
DKIM uses public key cryptography to let users verify and maintain message integrity, and identifies legitimate messages. The proposed standard uses DNS in the same manner as DomainKeys, Yahoo's anti-spam protocol, which is in use around the world. DKIM also leverages Cisco's Internet Identified Mail header-signing technology, ensuring signature consistency as messages are sent through networks.
The benefits of signing e-mail using DKIM can be substantial for banks, utilities, e-mail commerce services and other companies that send transactional e-mail to consumers. Providing customers with a means to detect fraudulent e-mail can translate directly into increased user satisfaction, reduced customer care costs and strengthened brand reputation.
To sign an e-mail with DKIM, an e-mail administrator first creates one or more public/private key pairs using free software. The public portions are put into the domain's DNS records, while the private portions are given to the domain's sending mail servers. When sending a message, the mail servers use a private key to create a digital signature covering the message's headers and body, which is inserted in the headers.

The Vista era of Windows is here. Yet most organizations will retain Windows XP alongside new Vista...
Vulnerability Management For DummiesDownload this concise book "Vulnerability Management for Dummies," to learn about the simple steps...
Security Considerations When Deploying Remote Access SolutionsEffective network security is most successful when you use a layered approach, with multiple...

The Vista era of Windows is here. Yet most organizations will retain Windows XP alongside new Vista...
Turning information into a Competitive AdvantageCompanies today are realizing that competitive advantage is harder to sustain when based solely on...
PoE Plus: Impact on the PoE MarketThe standard for Power over Ethernet (PoE), IEEE Std. 802.3af(tm)-2003, advanced networking,...

Discover why Unified Threat Management Firewalls are ready for the enterprise today. High...
The Evolution of Network SecurityWe have so many holes punched in our firewalls today that many industry insiders question the value...
The self-managed networkWe aren't there yet, but advances in network and systems management tools are making it possible to...
Partner Content
Brilliantly simple security and control solutions for email, web and endpoint
www.sophos.com
Stopping data leakage
Learn how to exploit your current security investment to control the information that flows into, through and out of your network.
Download the white paper.
Why detection rates aren't enough
Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.
Download the white paper.
Applications: taking back control
Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.
Learn more today.
Comment