Mailing List Archive

Is DK/DKIM going to vanish after yahoo acquisition
When Microsoft acquires yahoo , I dont think they would pursue DK/DKIM
So that means SPF or Sender ID will have less competition

Hope now all yahoo mails will come with SPF records. I can block the
mails forged from yahoo at SMTP level then. That would reduce the
Nigerian spams by 20% atleast







Thanks
Ram



-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Archives: http://v2.listbox.com/member/archive/735/=now
RSS Feed: http://v2.listbox.com/member/archive/rss/735/
Modify Your Subscription: http://v2.listbox.com/member/?member_id=1311532&id_secret=92962059-892366
Powered by Listbox: http://www.listbox.com
Re: Is DK/DKIM going to vanish after yahoo acquisition [ In reply to ]
On Sat, 2 Feb 2008, ram wrote:
> When Microsoft acquires yahoo , I dont think they would pursue DK/DKIM
> So that means SPF or Sender ID will have less competition

It looks to me like Yahoo lost interest in DK some time ago.
<http://antispam.yahoo.com/domainkeys> just redirects to the DK
sourceforge project, which seems dead in the water.

The code there hasn't been updated in more than two years, although it
seems to work.

Most of the DK self-test sites listed have apparently shutdown. The two
that still operate are faulty. Sendmail's tester falsely believes DK
signatures bearing the h= element are invalid, and Skylist falsely
considers any "simple"-canonicalized signature to be bad.

(That's what I see from an Exim 4.68 / libdomainkeys-0.68 sender. It's
unlikely to be a problem with Exim's simple-canonicalization since
Sendmail accepts simple signatures if Exim is patched to remove the h=
element. It's unlikely to be a problem with Exim's implementation of h=
since Skylist accepts signatures bearing h=, so long as they are
nofws-canonicalized.)

DKIM is alive, and doesn't seem to be very dependent on Yahoo. You can
see them on a list of "participants", but as the last entry on a
13-element list.

Also, it's not like Yahoo ever really deployed DK anyways. The
_domainkey.yahoo.com record begins with "t=y; o=~;", which is even weaker
than saying "?all" in SPF...

---- Michael Deutschmann <michael@talamasca.ocis.net>

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Archives: http://v2.listbox.com/member/archive/735/=now
RSS Feed: http://v2.listbox.com/member/archive/rss/735/
Modify Your Subscription: http://v2.listbox.com/member/?member_id=1311532&id_secret=92963160-edd9d4
Powered by Listbox: http://www.listbox.com
Re: Is DK/DKIM going to vanish after yahoo acquisition [ In reply to ]
"ram" wrote:

> When Microsoft acquires yahoo , I dont think they would pursue
> DK/DKIM

DK is a now historic predecessor of DKIM, and not only Yahoo!
supports DKIM, also Cisco (Ironport, SpamCop) and many others.

> So that means SPF or Sender ID will have less competition

I wouldn't consider DKIM as "competition" for SPF, they have
different goals on different layers (2822 vs. 2821).

Maybe SSP, the not yet ready DKIM "sender signing practice",
will be a competition for PRA (SenderID). And maybe MS likes
DKIM-SSP better than PRA when it is ready. I'd be surprised
if MS does something rush, integrating Yahoo! is a huge task.

> Hope now all yahoo mails will come with SPF records.

If your "now" means "before 2010" I doubt it... ;-)

Frank

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Archives: http://v2.listbox.com/member/archive/735/=now
RSS Feed: http://v2.listbox.com/member/archive/rss/735/
Modify Your Subscription: http://v2.listbox.com/member/?member_id=1311532&id_secret=92967928-9b7125
Powered by Listbox: http://www.listbox.com