Search
This Month
March 2006
Sun Mon Tue Wed Thu Fri Sat
1 2 3 4
5 6 7 8 9 10 11
12 13 14 15 16 17 18
19 20 21 22 23 24 25
26 27 28 29 30 31
Recent Visitors
Jim Olson - Fri 16 Dec 2011 05:40 PM NZDT 
jeans111 - Fri 04 Nov 2011 10:28 PM NZDT 
Maria Jones - Thu 29 Sep 2011 07:27 AM NZST 
xxxxxx - Mon 26 Sep 2011 03:12 PM NZST 
syed2024 - Thu 18 Aug 2011 04:05 AM NZST 
Login
User name:
Password:
Remember me 
View Article  SIQ protocol IETF Internet draft 03 now available for review
The latest SIQ protocol Internet draft is available online with the IETF.

Its already been suggested that the change in ...   more »
View Article  Packing a domain and IPv6 lookup into a DNS packet
Reference material for agenda item at Meng Wong's reputation mini-summit Feb 27th 2006: "Overloading DNS" with reputation data - what are some of the limitations and advantages etc. This is a summary of the 4 emails I (ANTHONY HOWE) wrote on the 7th Jan 2006 to ASRG-IAR in response to John Levine's comment about using DNS to do reputation like other DNS based blacklists:   more »
View Article  SIQ protocol IETF Internet draft 02 now available for review
Earlier this week I posted the SIQ protocol draft 02 with the IETF and its now available online:

http://www.ietf.org/internet-drafts/draft-irtf-asrg-iar-howe-siq-02.txt

Abstract

   The Server Index Query (SIQ) protocol is intended to provide a
   standard means by which a mail exchange (MX) server can query
   one or more external services for scoring based on facts or
   reputation of an  IP/domain pair. This document specifies the
   communication protocol  used to transmit the IP/domain query
   and return the query response.  The implementation, correctness
   of results, and/or management of SIQ servers is beyond the
   scope of this document.

This draft incorporates much of the technical feedback given to me by Eric Allmann after the Sendmail Meeting of The Minds in San Francisco in July.

So far, Eric has been the only one to provide any actual  technical commentary and impressions about this protocol since it was first submitted to the IETF this time last year. I had hoped this past year to have had more feedback about SIQ or alternatives through ASRG IAR subgroup, which initially appeared to be the appropriate place for such discussions, but alas it appears that the IAR mailing list members have gone dumb through lack any interesting & fiery controversy worth arguing about.

I hope some of the more techinical amoung you will review it and post comments and/or alternatives here. I think its in the Internet's best interest that those interested in reputation systems and services develop an open and public protocol that can be used to implement the communication infrastructure for reputation query clients, caches, and servers.

View Article  Meng Wong's Karma project
 Meng Wong has a prototype project called Karma - so far I have found this page on it from July ...   more »
View Article  SIQ Protocol for Domain+IP reputation queries
The present generation "domain plus IP" email reputation query / response SIQ protocol has been in use in production mail servers since July 2003. This succinct slide presentation was made at the ASRG "Identity, Authentication and Reputation" session of the 61st IETF meeting held in Washington DC November 2004.

The SIQ protocol has MTA query clients available for sendmail, postfix and exchange, plus command line query clients for *nix and win.
   more »