Posted on 06/01/2006 12:20:31 PM PDT by nickcarraway
Back in 1972, by some accounts (http://www.livinginternet.com/e/ei.htm), a new form of communication known as email was born. It was a practical implementation of electronic messaging that was first seen on local timeshare computers in the 1960s. I can only imagine how much fun and revolutionary it must have been to use email in those early years, to have been at the bleeding edge of the curve.
Almost ten years later, in November 1981, Jonathan Postel published RFC 788 (http://rfc.sunsite.dk/rfc/rfc788.html) (later deprecated by RFC 821 (http://www.ietf.org/rfc/rfc0821.txt), also by Postel, and RFC 822 (http://www.ietf.org/rfc/rfc0822.txt) by David Crocker), thereby inventing the foundations of the Simple Mail Transport Protocol (SMTP) - a proposal that would revolutionize email again. Since that time, email has become as important an invention to the world as the telegraph and the telephone, and it has long been synonymous with the internet itself.
Twenty five years later, we still use essentially the same protocol. And email is a terrible mess. It's dangerous, insecure, unreliable, mostly unwanted, and out-of-control. It's the starting point for a myriad of criminal activity, banking scams, virus outbreaks, identity theft, extortion, stock promotion scams, and of course, the giant iceberg of spam (http://www.msnbc.msn.com/id/12480457/).
The problem is, email is now integral to the lives of perhaps a billion people, businesses, and critical applications around the world. It's a victim of its own success. It's a giant ship on a dangerous collision course. All sorts of brilliant, talented people today put far more work into fixing SMTP in various ways (with anti-virus, anti-phishing technologies, anti-spam, anti-spoofing cumbersome encryption technologies, and much more) than could have ever been foreseen in 1981. But it's all for naught.
A sinking ship
All the work spent fixing email is like rearranging the deck chairs on the Titanic. Email is a sinking ship and it should be abandoned just as other insecure technologies like telnet, ftp and the beloved Usenet nntp were "abandoned" years ago. All these old technologies actually live on and in some cases thrive (and in the case of the Usenet, still consume (http://en.wikipedia.org/wiki/Usenet) enormous amounts (http://www.google.com/search?hl=en&lr=&rls=en&q=Usenet+binary&btnG=Search) of bandwidth and offer very useful (http://groups.google.com/) information) but have been mostly superceded by newer protocols. Email should be abandoned in much the same way. The problem is, more people depend on email than ever before.
The main reason we will never win the email war against the spammers-phishers-scammers-botnets and their assorted ilk is we're bound by legal standards that limit the ways we can combat email abuse – unlike in the early days of the internet. The perpetrators are not bound by the law (http://www.securityfocus.com/news/11392). Therefore the good guys can't win. The only solution is to change the rules. We need to abandon our email infrastructure and concede that the spamming-phishing-virus-writing scumbags have won; moving on is only inevitable.
The problem is, we lack "something better" to abandon email for.
Starting from scratch Email in its current form will never, ever, ever be spam-free. It will never be virus-phishing-scam free. It will cost companies and individuals billions of dollars (http://www.internetnews.com/ec-news/article.php/3350891) in theft, criminal activity, and the reality of spam will grow from the 50-70 per cent it is today to 90 per cent of all traffic. Email will continue to harm millions of people through banking scams, identity theft, viruses, and more. Email will never be secure, because it was never designed to be secure.
The only solution is to start from scratch. Develop a new email system and make it secure. Use existing, proven technologies and a few new and novel ideas – starting with the latest encoding mechanisms, a reliable hashing algorithm, fast compression, strong encryption and signatures. Build an electronic identity. Encode, hash, encrypt, compress, sign, and provide a novel way to share keys when needed, for example. I don't know how this will all turn out, but perhaps yEnc, MD5, AES, H.264, and GPG are some potential technologies that could be used together. A new transport protocol would need to be flexible enough that any of these technologies could be replaced, transparently to the user, as better and stronger options become available. It would need to be seamless for the client – no more messy GPG or other stop-gap solutions that few people actually use. Secure email should be a mandatory "secure bundle" of email that is safe for sending a credit card number to a business or someone I know.
I don't want to think about any of this when I send secure e-mail, however. I just want to type my email and press Send. If I need my secure identity plugged in, say, from a USB key, fine.
The basics of communication One of the great joys of computers is that newer, better technologies supercede the older insecure ones, yet both the old and new generations still live happily together. There are so many examples of this, I won't even bother listing them here. A completely new, secure email system would be the internet's next big critical application. If it required IPv6 addressing, maybe secure email would also kill those ridiculous "tiered internet (http://news.bbc.co.uk/1/hi/technology/4552138.stm)" ideas with one stone. But I'm just thinking aloud.
--------------------------------------------------------------------------------
I'm a messaging junkie. Today's store-and-forward email is fundamentally broken, but I still like the concept very much. Instant messaging is too instant, and peer-to-peer networking is, ironically, too anonymous. Video conferencing is fantastic – if it's someone you know, and they're online (and you've combed your hair). Written communication is never going away. We're tied into an antiquated email system that needs to be abandoned and replaced.
I would love to see a secure email system that did all the hard-crunching on the client and perhaps generated a unique private-public key for each piece of mail, without user interaction. However it is done, let's make it rather mathematically difficult to send email, and even more difficult to send email to many recipients – while the process remains very simple to the end user. Make it a requirement that one mail sent to a thousand recipients securely would require a very fast client doing unique encoding, hashing, compression, and encryption on each piece of mail just to send it. I enjoy the thought of a spammer needing a giant Bewolf cluster ranked rather high up in the Top 500 (http://www.top500.org/) list of supercomputers to send one piece of spam to ten million people. At that point, the source of spam and the spammer himself would be a little bit easier to track down.
Simply complex Before you skip to the end of this column and submit your comment, telling me that I'm crazy or uninformed, understand that I realize the problem with email is very complex. It would be nice if the solution "appeared" to be rather simple. I've spent the past 18 years with an email address of some sort, dating back to 1988, and I get more email than most. But like most people, I'm just an end-user of email and it's very clear that email is a sinking ship. And millions of people were online in the 1980s before me.
Getting email clients to work with a new infrastructure will be a major hurdle, and the plumbing itself will take some time. Getting major ISPs and Yahoo Mail, Gmail and Hotmail to adapt an open solution will be even harder. Fine. There are many technical hurdles. But time and again, truly innovative technology will catch on. With the rise of the web, HTTPS and SSL, Napster, SSH, BitTorrent, and so much more, superior technologies have created many new storms.
With all the security problems stemming from 1981's nuclear explosion of SMTP, it seems only fitting that the bright minds in the security community should develop the internet's next killer app.
A gateway Far too much effort is spent preserving today's name@somewhere.com format, to the exclusion of everything else. The @ symbol was a novel hack, so let's find a similar new one.
Maybe I'm dreaming, but a gateway from e-mail to a new secure e-mail infrastructure, electronic identity or e-num system might be the first place to start. Perhaps using one of the reserved symbols first outlined way back in RFC 821 or 822, whether it's a bangpath secure!name@somewhere.com, or secure?name@somewhere.com or name=secure@somewhere.com might work – but it would have to degrade nicely with current email systems. However it's done, a very simple, elegant solution would be a fantastic way to start.
I'm confident that there is no solution using today's massive email infrastructure problems, because so many bright people have been working on it for such a long time. Maybe I am indeed dreaming that we can "abandon" today's email SMTP much like the Usenet's NNTP was "abandoned" years ago for something better – because that "something better" for email still doesn't even exist.
Copyright © 2006, SecurityFocus (http://www.securityfocus.com/)
Kelly Martin has been working with networks and security since 1986, and he's editor for SecurityFocus, Symantec's online magazine.
ping
what?? Lets ditch the post office instead
so, we're waiting for the suggestion we were sure you were going to make....
Settle down.
The reason that email scams work is that people fall for them... there is no way for them to be dangerous on their own.
educate yourself, be aware, and don't do idiotic things like give your banking info to someone who claims to want to give you 2% of a hundred million dollars! If you don't know that certain emails (or the web links contained in them) are scams, you probably shouldn't be on the internet at all.
Yeah, and as soon as you make something idiot proof, sure enough, someone will invent a better idiot.
There's a neat little invention by Alexander Graham Bell that looks promising.
I came this (fingers about 1/16" apart) close to falling for a really, really good one about a month ago. PayPal phishing scam said someone had bought and paid for something (multi hundred dollar item) on my account and fraud was suspected, click here to acknowledge...
I use Opera and hover over any link in these kind of emails, so I can see the true address in the status bar, and he actually had a pretty believable URL, so between that and being livid about someone supposedly ripping me off, I almost went for it.
priceless.
tacked it on the fridge.
The model would have to be something web-based, like Yahoo! Mail with superior spam filtering and accessible by devices that can't normally browse web pages.
Which one is Gore?
The company I work for maintains it's own email servers, and I rarely need to go out side the system. Only a few times per month. In the last three years I only receiveed two juck e-mails.
My account at home only accepts know senders.
You can avoid unwanted e-mails.
Huh? I use them every danged day.
Huh? I use them every danged day.
FTP, yeah, but even then, only anonymous ftp is worthwhile. I don't use telnet for anything anymore, when ssh/scp/sftp is soooooo much better. I take that back. I do use telnet for one thing... "telnet www.blah.com 80" is useful for diagnosing website issues. Even that one useful thing is pretty much supplanted by the firefox 'livehttpheaders' plugin though.
Yup. Good spam filters are a must though unless you change email addresses often. I have had the same email address for more than ten years now. Not only that, but my primary is just my initials, so I get hit with every automatic address generating spambot on the planet. Prior to moving to some extremely powerful filters at my email provider, I was getting 200 or so spam a day, and had created filters that were basically whitelists. If you weren't on the list, you got dumped to trash.
I support the author's idea of requiring computation be a part of generating the email, but see issues with this when it is applied to some of the mailing lists I'm on that have been ongoing concerns for years. I also don't much care for a system that will do away with anonymous email, as there is a place for even such things.
I've tried to encourage folks to use encryption for years, but have pretty much given up that battle, because people just don't care, even when they should.
"ftp and the beloved Usenet nntp were "abandoned" years ago"
holy crap, why didn't any of you here tell me!
i'm such a loser.
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.