Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« Insider Abuse at Dept. of Homeland Security | Main | RIAA Wins Battle with Downloading Mom, Still Losing War »

eBay and PayPal Adopt DomainKeys to Combat Phishing

The Register is reporting that eBay and PayPal

The online auction site and web pay service are working with Yahoo to use the firm's anti-phishing technology.

The firms are supporting the emerging standard known as domain keys, which block fake e-mails by validating the sender with a digital signature.

...
The technology, called the DomainKeys Identified Mail (DKIM), will be available to millions of Yahoo Mail users worldwide in the coming weeks.

This is a good sign, we're overcoming some of the hurdles to DKIM.

Digitially signed emails allow email servers to verify the identity of senders making it more difficult for spammers to spoof. One of the barriers to adoption has been the need for senders and receivers to both use the standard. The Register quoted one analyst:

Chenxi Wang, a security analyst with Forrester Research, told Reuters: "Two years ago if you asked companies whether they were using e-mail authentication, most people wouldn't have cared.

"The industry is slowly coming around," Mr Wang said.

Better late than never.

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/462

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net