Open Reputation System for Email

SIQ protocol IETF Internet draft 03 now available for review

Anthony Howe (SnertSoft) — Sat, 25 Mar 2006 00:53:30 +1200

The latest SIQ protocol Internet draft is available online with the IETF.

Its already been suggested that the change in ...

Packing a domain and IPv6 lookup into a DNS packet

April Lorenzen — Tue, 28 Feb 2006 13:08:17 +1300

Reference material for agenda item at Meng Wong's reputation mini-summit Feb 27th 2006: "Overloading DNS" with reputation data - what are some of the limitations and advantages etc. This is a summary of the 4 emails I (ANTHONY HOWE) wrote on the 7th Jan 2006 to ASRG-IAR in response to John Levine's comment about using DNS to do reputation like other DNS based blacklists:

SIQ protocol IETF Internet draft 02 now available for review

Anthony Howe (SnertSoft) — Sat, 27 Aug 2005 02:01:56 +1200

Earlier this week I posted the SIQ protocol draft 02 with the IETF and its now available online:

http://www.ietf.org/internet-drafts/draft-irtf-asrg-iar-howe-siq-02.txt

Abstract

   The Server Index Query (SIQ) protocol is intended to provide a
   standard means by which a mail exchange (MX) server can query
   one or more external services for scoring based on facts or
   reputation of an IP/domain pair. This document specifies the
   communication protocol used to transmit the IP/domain query
   and return the query response. The implementation, correctness
   of results, and/or management of SIQ servers is beyond the
   scope of this document.

This draft incorporates much of the technical feedback given to me by Eric Allmann after the Sendmail Meeting of The Minds in San Francisco in July.

So far, Eric has been the only one to provide any actual technical commentary and impressions about this protocol since it was first submitted to the IETF this time last year. I had hoped this past year to have had more feedback about SIQ or alternatives through ASRG IAR subgroup, which initially appeared to be the appropriate place for such discussions, but alas it appears that the IAR mailing list members have gone dumb through lack any interesting & fiery controversy worth arguing about.

I hope some of the more techinical amoung you will review it and post comments and/or alternatives here. I think its in the Internet's best interest that those interested in reputation systems and services develop an open and public protocol that can be used to implement the communication infrastructure for reputation query clients, caches, and servers.

Meng Wong's Karma project

April Lorenzen (Outbound Index) — Sun, 07 Aug 2005 01:45:06 +1200

Meng Wong has a prototype project called Karma - so far I have found this page on it from July ...

SIQ Protocol for Domain+IP reputation queries

Steward — Sat, 06 Aug 2005 15:45:01 +1200

The present generation "domain plus IP" email reputation query / response SIQ protocol has been in use in production mail servers since July 2003. This succinct slide presentation was made at the ASRG "Identity, Authentication and Reputation" session of the 61st IETF meeting held in Washington DC November 2004.

The SIQ protocol has MTA query clients available for sendmail, postfix and exchange, plus command line query clients for *nix and win.