3D in my browser, rendered by my browser? I gotta get this.

I haven’t seen anything published about this yet, but I noticed today that Windows Live Hotmail seems to be authenticating incoming e-mail using DKIM in addition to Sender ID.

Background

In the past, Hotmail has verified the authenticity of incoming e-mail through Microsoft’s proprietary version of Sender Policy Framework called Sender ID. Both of these projects were designed to verify that the computer sending the message, as identified by the originating IP address, is authorized to send e-mail on behalf of the named sender.

A typical SPF policy, specified through a TXT record in DNS, might say

v=spf1 ip4:208.97.132.0/24 -all

This means that only IP addresses in the 208.97.132.1–208.97.132.254 range are allowed to send e-mail on behalf of this domain. (The Sender ID policy would look similar, but starting with spf2.0/pra.)

Hotmail’s policy has been to verify all incoming e-mail using the Sender ID framework. This theoretically reassures users that authenticated e-mail definitely comes from the named sender, reducing the likelihood of header forgery. If an e-mail does not pass Sender ID verification (softfail) and has other signs of being forged, it will likely be classified as junk.

A valid e-mail is marked with these headers:

X-SID-Result: Pass
X-AUTH-Result: PASS

If the organization’s policy uses the strictest policy (-all), and the message does not pass Sender ID validation, and the organization has submitted its Sender ID records to Microsoft, invalid e-mail sent to @live.ca and @live.com domains are rejected. As far as I am aware, this protection is not applied to @hotmail.com accounts.

From SPF to DKIM

The problem with SPF is that it doesn’t verify much. All it tells us is that an e-mail comes from the right computer—not that an intermediate server hasn’t tampered with it. In addition, SPF only really validates the From: or Sender: headers.

Besides, many large service providers cannot implement a strict SPF/Sender ID policy because users may be sending e-mail through other servers. (For example, I might use my ISP’s SMTP servers to send e-mail from my Windows Live Hotmail address; a strict SPF/Sender ID policy would mark those e-mails as junk.)

DKIM, however, encompasses the contents of the message body, in addition to the headers. It does not necessarily require the e-mail to come from a certain IP address. Using public key cryptography, it allows organizations to take responsibility for sent e-mails by verifying that the e-mail came from an authorized source, similar to the way secure servers connect over TLS/SSL.

Implementing DKIM means that all outgoing e-mails are signed using a private key; the signatures are then checked by compatible software against the public keys published in DNS. Each domain can have multiple DKIM keys, allowing multiple sending systems to sign outgoing e-mails independently.

A sample DKIM signature looks like this:

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=frederickding.com; s=google;
        h=domainkey-signature:mime-version:from:date:message-id:subject:to
         :content-type;
        bh=b3wR4p4G21l92tc0ahioopi7atMwDp2wkaQb/uOL65E=;
        b=YJ6nD3Nx5hgwRhYppb/n2g5lQxA5jzFvYEJ0dR4dtkRFv14GVJWStQXwwZryGuujC/
         v4ve5ZE3ZAEAtv5hCj99ZLAfR52rskpbitso+106M8uQvryLyuLSnX1mrk6JaDFLMr8V
         qHmCEZUF5+cnWEYSwlLo1T8hntgN28hj8OyJY=

DKIM actually requires a lot more work for organizations to implement, as it requires additional DNS lookups and (perhaps) expensive cryptographic calculations. A decade ago, it would have been unfeasible to implement this on an organization as large as Windows Live Hotmail.

Hotmail today

Today, the inexpensive cost of processing power makes it possible for Hotmail to validate DKIM. Yahoo! has been doing this since the beginning, as it was the source of this technology. Gmail, too, has been validating DKIM for some time. (Both Yahoo! and Gmail sign outgoing e-mail with DKIM signatures, and Google has made this possible through its Google Apps service for companies as well.)

While Windows Live Hotmail has always validated Sender ID, today I noticed the addition of a new e-mail header:

X-DKIM-Result: Pass

This is good news.

Conclusion

To summarize a post’s worth of babbling, this means that Windows Live Hotmail is taking additional steps to combat e-mail forgery, phishing and spam. A step forward for everybody.

Although I’ve seen Parisian Love before, some of the newer search stories are just as moving.

“High School” – a girl works to fit in

“Father and Daughter” – a hardworking father makes time to be a good dad to his little girl

“Graduation” – a mother from Vietnam moves to America to provide the best for her son

“Brother and Sister” – siblings grow up together

I hope these short clips bring smiles to your face as they did for me.

Technology

Windows has entered a new era

The decade—indeed, the century—began with Windows 2000, which I consider the first great version of the operating system. XP was the version that brought widespread success, and people just seem to refuse to upgrade; even today, almost three quarters of the computers on the net are on XP.

Despite the dismal failure of Windows Vista, it too brought change, which was followed by the enhancements of Windows 7. Compare my desktop today to the ugly screens of a decade ago:

Apple deserves an honourable mention for the ground-breaking work they’ve done on the Mac, elevating it to a newly trendy status.

Portable media players have completely changed

A decade ago, CD players and tape-based Walkmans were still the norm for ‘portable’ audio players. The iPod, launched in 2001, entirely changed the game. (I suppose this and the iPhone were the “comeback of the decade”.) It was no longer a device that played removable media. That was followed by thousands of other portable media players, to which the public generally refers inaccurately as “MP3 players”, reflecting the popularity of the 15-year-old MP3 format that has also been notorious for illegal file sharing (see below).

Cell phones and mobile devices have become ubiquitous

These devices used to be ugly, huge and heavy objects. As we move into 2010, cell phones have become more compact (usually this means thinner and lighter) and more powerful.

In China, about 739 million people have cell phones; that’s more than there are Internet users in China (which is about 360 million).

Mobile devices have become truly powerful. The iPhone, purportedly the most popular cell phone of 2009, is one of the biggest platforms for software development. And it has a touch screen. RIM’s BlackBerry, initially launched in 1999, is the most popular smartphone among business users.

Ordinary people begin to embrace ultra-portable netbooks for lightweight computing. The move to mobile is probably the most noticeable trend in end-user gadgetry in this decade.

Illegal file sharing has emerged

I don’t personally think of torrenting itself as a major problem, and it’s difficult to sympathize with big companies when the RIAA is being stupid. At the same time, it’s pretty easy to see how having hundreds of movies, TV shows and music albums distributed through torrents can take away from earnings for content producers. (Some dispute this and argue that those who pirate movies and TV shows are those who will purchase related memorabilia or boxed sets.)

In any case, it is virtually undisputed that new technologies have made distribution of such content much easier. In the previous decade, pretty much everyone was on dial-up Internet and only the students at universities with blazing connections were able to do it (think about the controversial Napster).

YouTube happened

YouTube and hundreds of other video sites have revolutionized the way we watch video. What used to be distributed on tapes and discs has moved onto the Internet in a way that allows ordinary folks—not videophiles or geeks—to share their multimedia with the world.

YouTube is also the icon of the so-called Web 2.0, which is oriented on user-generated content. (Flickr deserves an honourable mention for high quality pictures, just like Vimeo for high class videos.) It has made it possible for teens with crazy personalities and high-pitched edited voices, artists who post music videos, and crazy dancers who travel the world to reach out to a vast audience. Above all, it’s a legitimate new form of entertainment.

Following the success of online video, major content producers began to license music for online distribution (think Pandora or Last.fm, not to mention Internet radio) as well as movies and TV shows (think Hulu).

http://www.youtube.com/watch?v=dcLMH8pwusw

Open source projects have become worthy challengers

More than a decade ago, in 1996, the Apache HTTP server became the most popular web server in use; today it has surpassed 100 million web sites served.

Mozilla Firefox, having risen out of the ashes of the Netscape browser, although not the most widely used browser in the world (it’s 2nd), is apparently used by 32% of the market analyzed by StatCounter.

While I still use Microsoft Office, OpenOffice.org is also a notable alternative to the proprietary and dominant office suite, especially on non-Windows operating systems.

And then there are the programs used by geeks, like the Eclipse IDE or Aptana Studio, that are depended upon. (For all of you multimedia geeks, there are open source programs that do the job much better than their closed source counterparts; think about Handbrake, VLC…)

Businesses can now also depend on open source projects like Sugar CRM that build their revenue model around support and premium features.

News has moved onto the Web

My primary news source  now is the Web. Google News is one of my frequently visited sites, as it is a fantastic aggregator of headlines. I subscribe to e-mail summaries from the Toronto Star and breaking news alerts from the New York Times. ArsTechnica and TechCrunch are my sources for technology-related news, and occasionally Mashable and Neowin. Those pesky short links in the tweets of people I follow also make for engaging news articles.

Wikipedia happened

At the beginning of this decade, I was researching in books and print encyclopedias. The conventional wisdom today of “just Google it” didn’t work so well then. And certainly there wasn’t a Wikipedia for the wealth of human knowledge that it now contains.

Today, I can near-instantly read up on the history of Wal-Mart or read up on the Beslan school hostage crisis and its media coverage. If I truly need it, Wikipedia connects with Wikisource, the free library and Wikibooks where I can read Anna Karenina online (and I wouldn’t, because Constance Garnett’s translations are really lacking).

It’s truly amazing that the sum of all human knowledge can be collaboratively archived and updated through the likes of Wikipedia. Perhaps they need your support this holiday season!

What do you think? Did I miss out on something big that happened in this decade in the world of tech? Write a comment!

(I did, however, intentionally exclude social networking—i.e. Facebook—because I don’t think it’s been revolutionary in any major way. Sure, it has connected people in new ways, but it’s still relatively fresh and more time is needed to see where it goes. Similarly, I omitted touch because it hasn’t entirely caught on yet; tablet PCs were a dismal failure a few years ago and I haven’t yet seen their widespread success. Furthermore, I omitted cloud computing because it doesn’t directly affect a large number of people. Feel free to disagree with me in the comments.)

Worldly Matters

I think September 11, 2001 marked the start of a new era of warfare and international affairs. The terrorist attacks, inasmuch as they have been abused to justify ill-advised battles, did shock the world.

I recommend you head over to the Big Picture where you’ll be dazzled by splendid photos of this decade, including commentaries on the World Trade Center attacks and war. And dozens of other things like natural disasters (remember Katrina, or the Sichuan earthquake?), the Beijing Olympics, and terrorist attacks in London.

2009 has been a fantastic year. I look forward to the future.

Happy holidays and all the best in 2010!

“…introducing Bing: the better way to Google”; also known as “the easiest way to Google since Yahoo!”

via TechCrunch