Projects / Thunderbird Extension for S...

Thunderbird Extension for Sender Verification

The Thunderbird Extension for Sender Verification validates the From: address of incoming email messages by using the Sender Policy Framework and DomainKeys. The result of the verification is displayed at the top of every message.

Tags
Licenses
Operating Systems
Implementation

RSS Recent releases

  •  20 May 2007 22:10

No changes have been submitted for this release.

  •  14 May 2005 13:44

Release Notes: SPF checks are no longer performed by sending a query out to a central server. The extension does all of the SPF work itself. However, email messages with DomainKeys info are still checked the old way when SPF fails. There are also new rudimentary checks for "domain look-alikes".

Release Notes: Support for Yahoo! DomainKeys was added. UI enhancements and bugfixes were made.

No changes have been submitted for this release.

RSS Recent comments

26 May 2007 10:28 tauberer

Re: Why does this use HTTP instead of DNS?
In the last two years, the extension was rewritten to do SPF queries on its own, without contacting my web server, and DomainKeys checks are turned off by default, so the privacy concerns have been addressed.

23 Nov 2004 06:13 tauberer

Re: Why does this use HTTP instead of DNS?

> Can't it be written to cause Thunderbird

> to use DNS directly instead?

>

> I'm a bit worried about the privacy

> issues there...

Yeah, but I challenge you to write a portable extension that does everything in JavaScript. Way difficult, and maybe not even possible. Plus, I posted the source code for the HTTP server script on the site, so if you're concerned about privacy, you're free to set up your own private system.

Everything in life is a tradeoff. In this case, phishing protection versus total privacy.

22 Nov 2004 00:35 Avatar jhaar

Why does this use HTTP instead of DNS?
This extension causes your thunderbird to send details about every email you open to a CGI on taubz.for.net.

Can't it be written to cause Thunderbird to use DNS directly instead?

I'm a bit worried about the privacy issues there...

Other than that - it seems pretty keen :-)

Screenshot

Project Spotlight

Bitcoin

A peer-to-peer network-based digital currency.

Screenshot

Project Spotlight

libexplain

A library of system-call-specific strerror replacements.