http://australianit.news.com.au/articles/0,7204,8786712%5E15342%5E%5Enbv%5E15306-15319,00.html
Gates' email caller-ID plan
Karen Dearne in San Francisco
FEBRUARY 25, 2004
MICROSOFT chairman Bill Gates has called for an email "caller ID" to help fend off spam.
Spam is a threat as well as a nuisance, Mr Gates told RSA Conference 2004 in San Francisco yesterday. "Not being able to identify where email comes from is a huge security hole," he said.
"People send mail that appears to come from someone authoritative telling you to install or download something, or not to pay attention to some advice you might get from an authoritative source."
"So authenticating email and avoiding this domain spoofing is a key initiative for us."
Mr Gates said he would release a specific technical proposal for industry consideration this week. All mail coming in and out of the Hotmail and Exchange systems can now be authenticated in this way, he said.
"We've actually taken some patents around this (but) we'll be making the fundamentals available royalty-free for everyone to use," he said. "We're talking with ISPs and other mail providers, and we believe we can put this in place by mid-year."
Mr Gates also flagged a pop-up ad-killer that will be released as part of the upcoming Windows XP Service Pack 2 security upgrade.
"Pop-up ads are another security risk, quite apart from being extremely frustrating for web surfers," he said.
Users will be able to set the IE Pop-Up Blocker to automatically detect and block these ads according to personal rules. In the same way, sites requiring ActiveX controls will be managed according to user instructions
Mr Gates said Microsoft's next-generation Active Protection Technology will "watch network activities and understand what the appropriate policies should be", allowing automated dynamic responses to threats or unusual behaviours.
Meanwhile, momentum was building behind standards for a web services platform that would allow "any piece of software to talk in a rich, secure way with another piece of software" over the internet.
"This is an infrastructure that's absolutely vital to achieving the dreams of e-commerce that were talked about in the internet bubble period," Mr Gates said.
"We have a working draft of all the scenarios that will be used around the WS web services security standard that will be released at the conference this week. This standard is very near completion."
Karen Dearne is attending RSA Conference 2004 as a guest of RSA Security Australia.
Gates' email caller-ID plan
Karen Dearne in San Francisco
FEBRUARY 25, 2004
MICROSOFT chairman Bill Gates has called for an email "caller ID" to help fend off spam.
Spam is a threat as well as a nuisance, Mr Gates told RSA Conference 2004 in San Francisco yesterday. "Not being able to identify where email comes from is a huge security hole," he said.
"People send mail that appears to come from someone authoritative telling you to install or download something, or not to pay attention to some advice you might get from an authoritative source."
"So authenticating email and avoiding this domain spoofing is a key initiative for us."
Mr Gates said he would release a specific technical proposal for industry consideration this week. All mail coming in and out of the Hotmail and Exchange systems can now be authenticated in this way, he said.
"We've actually taken some patents around this (but) we'll be making the fundamentals available royalty-free for everyone to use," he said. "We're talking with ISPs and other mail providers, and we believe we can put this in place by mid-year."
Mr Gates also flagged a pop-up ad-killer that will be released as part of the upcoming Windows XP Service Pack 2 security upgrade.
"Pop-up ads are another security risk, quite apart from being extremely frustrating for web surfers," he said.
Users will be able to set the IE Pop-Up Blocker to automatically detect and block these ads according to personal rules. In the same way, sites requiring ActiveX controls will be managed according to user instructions
Mr Gates said Microsoft's next-generation Active Protection Technology will "watch network activities and understand what the appropriate policies should be", allowing automated dynamic responses to threats or unusual behaviours.
Meanwhile, momentum was building behind standards for a web services platform that would allow "any piece of software to talk in a rich, secure way with another piece of software" over the internet.
"This is an infrastructure that's absolutely vital to achieving the dreams of e-commerce that were talked about in the internet bubble period," Mr Gates said.
"We have a working draft of all the scenarios that will be used around the WS web services security standard that will be released at the conference this week. This standard is very near completion."
Karen Dearne is attending RSA Conference 2004 as a guest of RSA Security Australia.