This blog is moving!
I have been thinking about this for a long time, but the time has finally come as I prepare the blog for the InfollutionZero.org website.
So please see it here: http://wnlreason.com/blog
Old articles, particularly the statistical ones that got a lot of hits, will be migrated over as well.
Barack Obama spoofs his email...!?
Al Gore emailed me the other day, at my GMail account. Based on the title of the email, it appears that Mr. Gore is endorsing the candidate Barack Obama. Fortunately I have installed
Iconix, a program that detects authenticated emails. In this case, as you see above, Iconix says that in fact the sender of the email is not Mr. Gore the purported endorser, but Mr. Obama the endorsee himself!!
This image popped in my mind of Obama sitting in front of a campaign computer, smirking and typing up a fake endorsement email from Al Gore using a barackobama.org email address.
Ridiculous of course. But it really points out the subtleties of email authentication disarray we find ourselves in. Email authentication systems are designed in early 2000s to help identify and combat spam emails. Industrial giants have come up with vastly different approaches. The two major systems in use these days are
SenderID (backed by Microsoft) and
DKIM (backed by Yahoo and Cisco).
Email authentication verifies the identity not of the user, but of the domain. Labels: email, identity, security