Sender ID

In Data-processing, Sender ID is a weak Norme of Authentification of the Domain name of the shipper of a Email.

Sender ID functions by the publication, in DNS, of a recording (of type SPF or, formerly, of type TXT) indicating which IP addresses is authorized to send mail for the field considered. The syntax used in this recording is that of SPF.

The identity tested by Sender ID is that indicated by algorithm PRA ( Purported Responsible Address , in RFC 4407). In a very summarized way, this algorithm consists in taking the headings following of the message: Feels-Sender: , Feels-From: , Sender: , From: and to preserve the first not-vacuum.

Sender ID can also use the shipper indicated by the order MAIL FROM in the session smtp.

Here for example part of the recording Sender ID of aol.com:

aol.com. 300 IN TXT " ip4 will spf2.0/pra: 152.163.225.0 /24… ptr: mx.aol.com? all"

It indicates that only can send mail for the account of aol.com (by using algorithm PRA):

machines of the network 152.163.225.0 /24,
the machines whose name ends in “mx.aol.com”.

The remainder of the Internet ( all ) probably does not have (the Tilde wants to say “undoubtedly not”) not the right.

Sender ID is standardized in the RFC 4406.

Controversies

Sender ID was in particular criticized for the Brevet which the company Microsoft on algorithm PRA, patent which could make it possible the latter to block the implementations of Sender ID which it has do not like. Microsoft, for example, proposed a license for its patent which excluded certain licenses from Free software like LPG.

In addition, Sender ID was published by IETF only with one important warning in the RFC which notes that certain parts of Sender ID violate other standards of Internet.

External bonds

(in) '' Sender ID Framework '' Microsoft

Random links: