Open encryption to combat spam and phishing

By Tom Espiner, ZDNet UK
Monday, May 28, 2007 09:52 AM

Open standards consortium Oasis has announced a scheme to push its public key infrastructure work.

The organization has formed a group--the IDtrust member section--which will seek to promote greater understanding and use of public key infrastructure standards, technologies, policies and practices, according to Oasis.

"IDtrust will advance standards that provide the basic security necessary for carrying out electronic business," said June Leung, chair of the steering committee for the Oasis IDtrust Member Section. "These standards make it possible for parties who do not know one another or who are widely distributed to communicate securely by adopting a chain of trust."

A public key infrastructure (PKI) attaches public keys to user identities through a certificate authority. Oasis IDtrust members will identify PKI trust assurance and standardisation policies, and will catalog implementation projects, publish adoption reports and conduct studies on the costs, benefits and risk management of PKIs.

"The US federal government has been working for years to develop standards, procedures and guidelines for implementing e-identity management services that can ensure trusted, secure transactions over the internet. IDtrust will help accomplish that mission," said Peter Alterman, assistant chief information officer at the US National Institutes of Health.

Open standards encryption specifications also received a boost this week with the release of an email encryption specification by the Internet Engineering Task Force (IETF), an open community concerned with the evolution of internet architecture.

The specification, DomainKeys Identified Mail (DKIM), defines a domain-level authentication framework for email, using public-key cryptography and key server technology to permit verification of the source and contents of messages. IETF said that protection of email identity may assist in the fight against spam and phishing.


WORTHWHILE?

0

0 votes
Blog

Talkback 0 comments

There are currently no comments for this post.


Tech Jobs Now!

Search for your ideal tech job:

Use SCP for quick, secure file transfers

Internet Security

When you need to securely transfer a single file, SCP may be the ideal tool.


Read more »



Amendments to empower Copyright Tribunal

Blog thumbnail

As a lawyer, I often inform my clients about the need to clear licenses with the various licensing societies whenever they use works belonging to other parties. This is especially..... by Bryan Tan

Read more »

Tags

  1. attack
  2. authentication and encryption
  3. blog
  4. data security
  5. e - mail
  6. hacking
  7. internet
  8. malware
  9. microsoft corp.
  10. network
  11. network security
  12. pc security
  13. researcher
  14. security
  15. security management
  16. software
  17. spam and phishing
  18. symantec corp.
  19. viruses and worms
  20. web