links for 2009-06-13

daily_links

• Lars Eggert : DKIM Deployment Trends
  This is a very strange survey. The methodology makes basically no sense to me — are they guessing the selector? "The scripts that update this page retrieve the names of the web sites that are most popular across the globe, as well as in select countries, from alexa.com in regular intervals. They then check whether the DNS entry for each site nameThe scripts that update this page retrieve the names of the web sites that are most popular across the globe, as well as in select countries, from alexa.com in regular intervals. They then check whether the DNS entry for each site name reflects that it uses DKIM. reflects that it uses DKIM."

  Not to mention that having a DKIM public key in a DNS record does not equate to deploying DKIM!

  (tags: dkim authentication email)
• Reminder: You Can't Trust the "From:" Line in an E-Mail
  SEC staff falls victim to email From: address spoofing. Though the post contains a blunder regarding DKIM.
  (tags: email DKIM spam SPF security)

chris @ June 14, 2009