Domain Keys

[mvern78_ironport]

How many people are using Domain Keys?
How are you currently implementing this authentication for mail you are sending?

~Vern

[Erich_ironport]

Waiting on the IronPort rollout of Domain Keys, not that I am impatient I realize it is a new technology and still in the process of an emerging new technology. :)

[nedwards_ironport]

From our discussions with other members in the industry, roughly 400 domains are signing messages via Domain Keys. The only ISPs that are performing both signing and verification are Gmail, Earthlink and Yahoo!. These ISPs currently aren't blocking failures, they are merely performing the verification and logging the result for analysis purposes. However, this will likely change over the next few months as some ISPs may present the results of the verification in the end user's inbox.

Domain Keys will be a great first step in solving problems associated with forgery.

[mvern78_ironport]

For those out there that are considering DK's you should know that Yahoo! and their partner domains (ex. SBC/Rogers.com) are now publishing the fact that you are authenticating in their user interfaces.

Authentication-Results: mta114.mail.scd.yahoo.com from=mail.foo.com; domainkeys=neutral (no sig)

Although they are not signing this user’s mail yet... It probably won't be long...

Authentication-Results: mta107.mail.scd.yahoo.com from=yahoo.com; domainkeys=neutral (no sig)

Cheers,
Vern

[Erich_ironport]

Does anyone have a link or data on which of the larger domains have adopted SPF or Yahoo DomainKeys currently.

[nedwards_ironport]

I have not seen any public information with details about who is or isn't publishing SPF records. It appears that an overwhelming majority of large ISPs are indeed publishing SPF records. Especially the MAAWG members.

Regarding general adoption rates, we had discussions with Meng Wong (SPF author) 1-2 months ago and the estimate at that time was about about 20% of the domains used in email are publishing SPF records.

[mvern78_ironport]

Checking for records - that I personally know of:

DKs:
Yahoo (all partners)
Gmail

Sender ID/SPF:
AOL
Hotmail/MSN
Gmail

This covers 60+ million email addresses between the 5 of them.

Would not surprise me to see more MAAWG members start checking DKs once they see how effective it is for Yahoo (hopefully Y! will publish something once they get this fully functional).

~ Vern

[Erich_ironport]

Can Senderbase publish stats on adoption status for both SPF and DomainKeys? Seems like it is in the data they collect, it would be just another Y/N field in the IP detail data and a rollout percentage on the domain name.