Spamhaus Proposal Aims To Stop Spam
The spam-figthting organization has applied to ICANN for a .mail top-level domain name it feels would eliminate a large amount of unwanted electronic junk mail.
Spamhaus, a leading spam-fighting organization, believes its application for a .mail top-level Internet domain could take a big bite out of the spam that's clogging companies' E-mail boxes.
The organization, staffed worldwide by volunteers, has applied for the new top-level domain from the Internet Corporation for Assigned Names and Numbers. It expects to hear whether the application is approved later this spring. The mechanism proposed to ICANN would keep spam from reaching E-mail servers though a complex "server-to-server" arrangement.
- Mobile DevOps: Achieving continuous delivery with multiple front ends and complex backends in Banking, Financial Services, and Insurance
- Maximize the benefits of virtualization for greater ROI
White PapersMore >>
- Strategy: How Cybercriminals Choose Their Targets and Tactics
- Best Practices: 6 Security Services Every Small Business Must Have
"Our approach is quite different," John Reid, a Spamhaus representative in the United States, said in an interview. "It works behind the scenes, mail server to mail server. Most people won't even know it's there because it works seamlessly." Using the sponsored top-level domain, users will register with The Anti-Spam Community Registry, whose Spamhaus volunteers will operate the anti-spam system.
Spamhaus personnel with the necessary technical expertise will oversee the undertaking, with the receiving-server and sending-server operators representing the core community. The sending-server operator registers a name in the sponsored top-level domain, and the receiving-server operator verifies the transmission by looking up domain information, including the IP address of the sender. "Using this information, the receiving server can easily determine if the sending server is spam-free, as well as determine if the E-mail was forged," the application states.
Because no E-mail messages can be observed coming from the sponsored top-level domain, the main public E-mail users will have no inkling that the E-mail servers behind the scenes have stopped the offending spam.
Reid, an IT consultant in California, said one motivation for proposing the system was the growing problem of filters stopping much "good mail" from getting through.
Reid said Spamhaus has asked developers and providers of the most popular E-mail-server software to write software for the new domain-based proposal now, because Spamhaus wants to move quickly if the ICANN application is approved.
The Anti-Spam Community Registry's board of directors would include some prominent anti-spam crusaders, such as Steve Linford, the founder of Spamhaus, and Joseph Sauver, director of User Services and Network Applications at the University of Oregon. Other proposed directors would be John Levine, chairman of the Anti-Spam Research Group of the Internet Research Task Force; Wietse Zweitze Venema, a specialist at IBM's Thomas J. Watson Research Center; Eric Allman of mail-server supplier Sendmail.org; Ted Galvin of SpamCom.org; Suresh Ramasubramanian, a spam fighter representing Asia; and Justin Mason or Daniel Quinlan of SpamAssassin.org.
Noting that Spamhaus already operates a worldwide network of E-mail servers set up to block spam, Reid said the organization's "spam traps" can quickly establish who spammers are and institute blocking action. Applicants to the Anti-Spam Community Registry must have a valid domain address for at least six months; applicants are also validated by postal mail and courier service. Reid said those measures should thwart most spammers.
Companies applying to register a .mail address would be charged about $2,000 annually to defray the cost of verification.