china standards retro

Uploaded from authorPOINTLite
Views:
 
Category: Entertainment
     
 

Presentation Description

No description available.

Comments

Presentation Transcript

A Retrospective on Future Anti-Spam Standards: 

A Retrospective on Future Anti-Spam Standards Internet Society of China Beijing – September, 2004 Dave Crocker Brandenburg InternetWorking <http://brandenburg.com/current.html>

Retrospective on the Future: 

Retrospective on the Future Spam is complex, confusing and emotional Imagine that time has passed What changes will be important? Email Will it still be easy to reach everyone? Will it be cumbersome, with fragmented communities? Spam Legitimate business will behave acceptably (mostly) Rogue (criminal) spammers will be worse than today

Security Functions: 

Security Functions

What Will Be Standard?: 

What Will Be Standard? Accountability (Author & Operator) Authentication Authorization Reputation Filtering Format of rules Reporting & monitoring Immediate problems Aggregate statistics Enforcement (Contracts and laws are standards) Terminology Acceptable behavior

Email Path(s) Today!: 

Email Path(s) Today! MUA MSA MTA MTA MDA MUA MTA MTA Peer MTA Peer MTA MTA MTA MTA MTA MTA MTA MDA MUA Mail Agents MUA = User MSA = Submission MTA = Transfer MDA = Delivery

SPF and Sender-ID: Author Path Registration: 

SPF and Sender-ID: Author Path Registration oMUA MSA MTA1 MTA4 MDA rMUA MTA3 MTA2 Peer MTA Peer MTA Assigns Sender & MailFrom Did MSA authorize MTA1 to send this message? Did MSA authorize MTA2 to send this message? Did MSA authorize MTA3 to send this message? Authority and Accreditation of MSA and MSA domain administrators MSA must pre-register and trust each MTA in path

My Personal Favorites: 

My Personal Favorites Validate content DomainKeys Public key signature of the message Validate operator CSV Operator validates MTA [Validate MailFrom] [BATV] Reputation CSA & DNA (CSV) Reporting No candidates, yet Enforcement We are still learning

Client SMTP Validation: Assess Peer MTA: 

Client SMTP Validation: Assess Peer MTA MUA MSA MTA MTA MDA MUA MTA MTA Peer MTA Does a domain's operator authorize this MTA to be sending email? Do independent accreditation services consider that domain's policies and practices sufficient for controlling email abuse?

CSV Functions: 

CSV Functions

How to Choose the Future : 

How to Choose the Future Look at each choice Who must adopt it? When? How much effort is need to administer it? How much does it change email? Xie Xie