Message submission agent: Difference between revisions

Content deleted Content added
Benefits: “M” starts with a vowel (“a MSA” to “an MSA”)
Benefits: “M” starts with a vowel (“a MSA” to “an MSA”)
Line 28:
Another benefit is that separating the MTA and MSA functions makes it easier for an MTA to deny relaying, that is to refuse any mail that is not addressed to a recipient at a ___domain that is served locally. This is a strategy used by ISPs to prevent the sending of spam from virus-infected client computers. By contrast, an MSA must generally accept mail for any recipient on the Internet, though it only accepts such mail from authors who are authorized to use that MSA and who have established their identity to the MSA via authentication. In times when both mail submission and acceptance of incoming mail were usually accomplished using the same protocol and the same server, the ability to send mail to arbitrary destinations without authentication allowed spammers to use MTAs as a means of distributing [[E-mail spam|spam]] (since a single message transaction can request that an MTA relay a message to a large number of recipients), and also made it more difficult to trace a message to its origin.
 
Yet another benefit is that MSAs and MTAs can have different policies for filtering of spam. Most MSAs require authentication in the form of a username and password provided by the author. Any messages received by such an MSA are therefore traceable to an author who has a direct relationship with the MSA, and who can be held accountable for his actions. This allows the MSA to have either no spam filtering, or more permissive spam filtering than an MTA that exists for the purpose of accepting incoming email from other domains. It is difficult to establish trust in mail sent between arbitrary domains, because there is generally no direct relationship between those domains via which trust, or even identity, can be established. In the absence of such trust, aan MTA must generally rely on heuristics and third-party reputation services to distinguish spam from legitimate traffic, and both of these mechanisms have a history of being error-prone.<ref>{{cite journal |doi=10.1016/j.cose.2009.05.002 |title=DNS-based email sender authentication mechanisms: A critical review |author=Amir Herzberg |date=19 May 2009 |journal=Computers & Security |volume=28 |issue=8 |pages=731–742 }}</ref><ref>{{cite web |url=http://www.usenix.org/event/lisa04/tech/blosser/blosser_html/ |title=Scalable Centralized Bayesian Spam Mitigation with Bogofilter |author=Jeremy Blosser and David Josephsen |date=November 2004 |work=Proceedings of LISA '04: Eighteenth Systems Administration Conference |publisher=[[USENIX]] |accessdate=24 June 2010}}</ref> The separation of MSA and MTA therefore avoids the use of unreliable spam recognition mechanisms during mail submission, and increases the probability for legitimate mail to be delivered successfully.
 
==Protocol==