Microsoft Antispam Effort Killed Amid Patent Row

The failure to reach consensus on the Microsoft-championed proposal known as Sender ID throws back to the free market a process many consider urgent in view of the unabating onslaught of spam.

Sender ID's effectiveness and compatibility with existing mail systems were already in question before members of the Internet Engineering Task Force got hung up on the patent battle, said Yakov Shafranovich, a leading antispam activist.

The task force, which works by consensus on Internet standards, dissolved a working group on Sender ID last week after deciding that agreement could not be achieved anytime soon.

Some experts say the decision could speed up work on a different spam-control technology from Yahoo, one seen as stronger but more difficult to implement.

The IETF is expected to create a working group as early as November to craft standards for digitally signing messages, an antispam approach Yahoo favors. Two other groups are in the works to explore additional approaches.

It's possible for two or more of these technologies to work in conjunction.

The Microsoft and Yahoo proposals, along with one being tested by America Online, aim to tackle e-mail spoofing -- the practice of sending messages that pretend to be from someone else, be it Bill Gates or a friend in your address book. The technology wouldn't eliminate spam, but it could help identify and block a common spam technique.

Under Sender ID, Internet service providers would submit lists of their mail servers' unique numeric addresses. On the receiving end, software would poll a database to verify that a message was actually processed by one of those servers.

Microsoft has applied for a patent on the method for polling the database. Though the company promises to make the technology available for free, it wants to bar software developers from further licensing it -- a restriction that several members of the open-source community find unacceptable.

As the Sender ID working group, formally known as MARID, began trying to craft a compromise on the patent issue, members resurrected technical concerns previously thought to have been settled. That's when the group's leaders decided to abandon the project.

Microsoft spokesman Sean Sundwall said the company would continue to push Sender ID regardless of the IETF's decision. He said smaller companies might hesitate without standards but larger ones won't change their plans.

"Once you get a critical mass of people adopting Sender ID, it becomes for the smaller sender critically important they adopt it as well," he said.

Andrew Newton, co-chairman of the working group, declined interview requests but put a positive spin on the developments in an e-mail statement.

"This is part of the IETF process asking the community to gather more experience with sender authentication schemes to get the final standard right," he wrote.

John Levine, who heads an Anti-Spam Research Group affiliated with the task force, said members couldn't come to terms because they had little real-world data.

But Dave Anderson, chief executive of Sendmail, said he believes resolution would have been possible if not for the patent fight. Sendmail is testing various antispam schemes, including Microsoft's and Yahoo's.

Dave Crocker, an Internet pioneer with the Brandenburg InternetWorking consultancy, said heated debate during the standards-setting process is fairly common, but the one over spam is unusual because of a perceived need to rush.

Larger than the patent fight, he said, was the ambitious schedule for resolving fundamental technical difficulties.

"The normal approach is to proceed very cautiously," Crocker said. Major changes to the Internet architecture "always have unintended consequences and they are usually bad."

Copyright © 2004 The Associated Press. All rights reserved. The information contained in the AP News report may not be published, broadcast, rewritten or redistributed without the prior written authority of The Associated Press.