Entries Tagged as 'Email'

SPF / DKIM

SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail) are two methods to help indentify email which is likely not SPAM.  SPF was originally proposed in 2003 by Meng Weng Wong and Wayne Schlitt (SPFv1 RFC4408) as an open standard (SPF is backed by the Sender Policy Framework Council); DKIM originally merged and enhanced DomainKeys from Yahoo and Identified Internet Mail from Cisco (RFC4870 superseded by RFC4871) forming an open standard (DKIM is backed by an industry consortium).

Both SPF and DKIM attempt to provide information to receiving SMTP servers about whether or not a particular email message is authentic.

SPFv1 uses a very simple approach where a domain’s DNS server provides a root level TXT record that supplies information about SMTP mail servers that are permitted to originate domain email.

DKIM uses a more complex digital signature on each message (information about which is stored in a sub-domain in domains DNS containing self-signed keys).

You can read up on the specifics of each through the reference links provided below.


SPF (Wikipedia)

Microsoft SPF Record Wizard · OpenSPF Wizard

DKIM (Wikipedia)

JustHost.com POP / IMAP / SMTP Settings

POP:
host: mail.<yourdomain>
host: <yourhost>.justhost.com
port: 110
port: 995, SSL

IMAP:
host: mail.<yourdomain>
host:<yourhost> .justhost.com
port: 143
port: 993, SSL

SMTP:
host: mail.<yourdomain> (requires authentication)
host: <yourhost>.justhost.com
port: 25
port: 2626
port: 465, SSL

WEB MAIL:
url: https://<yourdomain>:2096
url: https://<yourhost>.justhost.com:2096


NOTES:

  • SSL: you will need to accept the self signed certificate; some mail readers do not allow you to retain self signed certificates, so you will need to do that each and every time a connection (or initial connection) is made.
  • SMTP: requires authentication; also you ISP may block port 25 (which is why port 2626 is also supported).
  • <yourhost> would be something like cl111 so for example cl111.justhost.com
  • <yourdomain> would be something like mydomain.com so for example mail.mydomain.com

Just Host

As I posted a couple weeks ago I’d gone ahead and moved some of my domains over to JustHost.com.

Mainly I was looking for an affordable hosting package that supports server side includes in addition to what I already had at 1and1.com for around same price.  I also wanted unlimited bandwidth (but frankly I could have gotten that at 1and1.com with a cross-grade for just a small amount more per month with no hassle).

The way I started looking for a new host was to find some the “10 best” “50 best” or what ever they happened to be articles on the internet for hosting companies.  I read through them, looked at their current offerings, features, and prices.  The ones I felt were interesting I looked for reviews on the internet and read them.

Reviews from people you don’t know are not necessarily valuable.  Read the review, see what they’re saying, see how they’re saying, and see if their needs and abilities closely ally with yours.  And look for a pattern in reviews — if many people say the same thing, it’s far more likely to be true and not simply an isolated incident.

Once I narrowed down the field to a handful I reviewed any demos they offered of their control panel, features, etc.  If they didn’t have any demo I placed them on the bottom of the list.

Then I tried their online “chat” feature to talk to a pre-sales person.  If they didn’t offer an online chat I placed them on the bottom of the list (the very bottom — online chat is more important in the long run than a demo).

For the chat, I asked a few questions that there were in fact answers to on their site (just to see how quickly the person on the other end could provide me with a response, and if their response agreed).  Then I ask any questions that I had that were not addressed by the site.  Finally I ask one question that would require the person to actually think and apply the information on their site to the context of the question.

After that I decided on going with JustHost.com — they seemed like they provided the best package, best support, and most reasonable price.  When I went to order the package they offered me a better price when I was going to navigate away from the order page to check on a couple things.

I’ve moved all my domains over to JustHost.com; I’ve put an affiliate advertisement for JustHost.com on my web page and my BLOG (if you’re going to order service from them, I encourage you to click on the advertisement on here so as to help defray the costs for maintaining my BLOG — and hopefully growing it; it won’t cost you anything).

Things I don’t like…

  • They have the concept of a “primary” domain; which makes all domains but that reside under the primary in the directory structure.
  • They do not allow direct access to DNS on shared packages.
  • Shell access is extra (quite a bit extra) per year.  It would have been a “nice to have”, but I didn’t need it, and didn’t pay for it.
  • PHP5 doesn’t work by default in subdomains.
  • Databases are on the same machine as web servers.  I know this is very common, but I prefer databases to be on database servers and web servers to be separate.  This item is on the end of the list for a reason.

But…

  • They will allow you to use a “fake” domain (I did a subdomain of their domain) as your primary, which makes all domains equal, but if you want to access the root you have to use the host name where your hosting account files are located rather than your domain name (you could have them enter a CNAME for you if you like, but if you forget the host name just do a trace route to one of your domain’s web addresses and you’ll see it).
  • While you don’t have direct access to DNS, they will enter DNS records for you — CNAME I know (they did that for me); and I expect they’ll do TXT, A, etc.
  • To enable PHP5 in a subdomain you just need to add a couple lines to your .htaccess file (the service representative didn’t know them right off the top of his head; but after confirming it should work, I had no problem).

Things I do like…

  • The price is very reasonable for a unlimited shared hosting package.
  • Customer support is great; the people who’ve chatted with me or replied to my tickets have been extremely courteous and have resolved the issue.
  • Server side include support.  It really is nice to be able to have dynamic content that is provided by the server rather than have to have intricate AJAX requests (and faster).
  • Performance.  Thus far I can’t complain about the performance.
  • IMAP, POP, SMTP email both clear text and SSL versions.  SMTP is offered on alternate ports as well for individuals who’s ISP block access to port 25.

I often say..

Rarely do you get what you pay for.

With JustHost.com you may in fact get what you pay for (and maybe more).

A new host…

I’ve mentioned before that I was considering moving my web sites to another hosting company, not that there’s anything really wrong with my previous hosting company, but more so because I wanted some features that were just too expensive for me to justify.

My new hosting company — JustHost.com — offers fairly attractive prices, has a fairly good reputation, and has the features I most wanted on an unlimited hosting package.

It’s still too soon for me to give them a recommendation; but I have placed an advertising link on the side panel of my site and blog to them (and yes I will get a referral fee if you use it).

A couple things…

I’m not hosting any domains with them; their registration price isn’t bad, but private registration is extra (and I really don’t like my personal and confidential information published on the web to be harvested by those who will not benefit me).

The cPanel interface they use is fairly common at hosting companies (I guess vDeck is the other big competitor) — but it’s totally different from what I’m used to.

Keep in mind, you should evaluate a web hosting company against your personal needs and requirements.  Remember, most hosting companies packages like this are not suitable for companies that have a great deal of web traffic and would suffer should their web site not be able to deliver information to customers.

Windows Live Mail Bugs

Make sure you’re sitting down, I wouldn’t want you to fall over — but there are bugs in Live Mail.

I actually did the Beta for Live Mail quite some time ago, and reported several bugs during the course of that — from my experience you’re wasting your time reporting bugs to Microsoft, each and every bug I found made it into the first release, and almost all of them are still there.

Here are two bugs that really need to be fixed.  Both are annoyances (they won’t result in the loss of data for sure); but both of them speak to the attention to quality and detail that simply isn’t part of the Microsoft culture.

The first bug which really needs to be fixed has to do with viewing a folder in an account.  Many times when you perform and operation (like deleting a folder for instance) Live Mail will repaint the folder view; however, it repositions the view port at the first item (but leaves focus where it should be)… the problem is if you have more folders that fit vertically on the screen, you’re looking at an entirely different time zone than the one that has focus.  A simple fix — save the view port position before the operation; restore the view port position after it if and before the repaint.  I guess the programmer that did this code was sleeping during Windows Programming 101.

The second bug which also really needs to be fixed has to do with dragging an email into the file system.  Windows Live Mail will create a file system safe name for the container file from the subject; however, if the subject ends in “…” (and probably many other character sequences) the file doesn’t get a “.eml” file extension, but rather a “._eml” file extension.  I guess the programmer that did this code figured it was right to make the file name file system safe after appending the extension when he should have made the base name file system safe and then appended the extension of “.eml”.

Like I said, these are simple issues — with very simple fixes… but they are fixes that shouldn’t be been necessary since this code should have never gotten out of Beta with these problems (they were reported).  In fact, I could argue that these problems should have never made it into a code build — they should have failed unit tests.

But these problems made it into release code; and these problems have existed for quite some time in release code — all I can say is that the commitment to quality I see in Microsoft software is similar to that that I see in Open Source code… so hopefully Microsoft will begin giving away more and more of it’s software at no charge so that the cost basis and the quality are on par.

Windows Live Mail

Part of the Microsoft Live Essential software suite available either from Live.com (see link below) or through the Microsoft Update is Live Mail; a simple, fairly versatile email client.

Live Mail allows access to POP3, IMAP4, and Hot Mail / MSN Mail / Live Mail web mail.

Live Mail is a replacement for Outlook Express and Windows Mail (from Vista).

It’s nicely polished, and for the most part works without any major issues (like any software, it has bugs and annoyances).

One thing you may not like is the fact that Live Mail hides the menu bar (you can enable it; but even that seems to be made purposely difficult in the latest version).

The biggest annoyance I have with Live Mail is that it will not import an IAF (that’s an export file) created with Outlook Express or Windows Mail (thank you very much Microsoft for paying such close attention to customer needs).

If you have a Hot Mail / MSN Mail / Live Mail web mail account you will probably want to choose this product as an email client on your computer; if you don’t you may want to look at Thunderbird (part of the Mozilla project, as is Firefox).

The feature I like most about Live Mail (and it’s predecessors) is the ability to drag an email out of Live Mail onto my local file system and put it back (Thunderbird doesn’t have any convenient way to put a message back).  This isn’t a feature that should be a deal breaker for most anyone (if you need to do it, you know how to do it with Thunderbird — it just won’t be quite as easy).

Overall, Live Mail is a descent program, and it’s priced right — FREE.

Windows Live Essentials

NOTE:  GMail content can be access by either POP3 or IMAP4; simply follow the instructions on GMail to enable it and add it to Live Mail or any email client that supports POP3 or IMAP4 over a SSL connection (and allows you to specify the port numbers).

Microsoft Live Essentials

With Windows 7 Microsoft has removed email, instant messaging, address book, calendaring,  and movie maker from the Windows install.  If you run the Windows 7 Upgrade Advisor it will direct you to Live.com (a Microsoft) site for tools that will add back these features to Windows.

Live.com has offered most all of these tools in one form or another for over a year; and for quite some time now the entire suite of tools.

I’ll just quickly list the features:

  • Live Messanger
  • Live Call
  • Live Mail
  • Live Writer
  • Live Photo Gallery
  • Live Movie Maker
  • Live Toolbar
  • Live Family Saftey

Live Messanger is the replacement for Windows Messanger, MSN Messanger it’s substantially the same as what ever Microsoft messanger you might use — with an updated look and feel and of course, new features.

Live Call is Microsoft’s entry into the voice communications market.  I’ve never used it, so I can’t really comment on it.

Live Mail is the replacement for Outlook Express and Windows Mail (for you Vista users).  It somewhat resembles both of it’s predecessors, but carries forward many of the refinements from Windows Mail; and introduces a number of “bugs” that had been stomped out long ago in the code line (I reported several during the BETA — they still haven’t been fixed, and I expect until they annoy someone on the Live Mail team they won’t be).  On feature that has been added that many will find useful is the ability to interface with Hot Mail/MSN Mail/Live Mail web mail directly (at no cost).

Live Writer is a WYSIWYG editor for BLOGing.  It interfaces to Live BLOGs as well as a number of blogging engines and web sites.

Live Photo Gallery is Microsoft’s attempt to get some of the media sharing market.  I don’t use it, but I’m sure they’ve figured out some way to make money from it (like all the others).

Live Movie Maker is the replacement for Windows Movie Maker.  I haven’t used it.  The previous software might be fine for novices; but I prefer to use Final Cut Studio on my Mac; so I don’t think my opinion of this software is relevant to the target audience.

Live Toolbar is like most toolbars, a waste.  Whether it’s invasive like most of them or not I can’t say — I have no need for toolbars; and you probably don’t either.

Live Family Saftey is designed to limit access to questionable internet sites and content.  I’ve never used it; but I would guess like most it errors on the side of caution.

There is also a Microsoft Office Outlook Connector, and Office Live Add-In which provide access to Live features directly from Microsoft Office (why?) that you can read about on your own.

Overall, many of the “free” tools in Microsoft Live Essentials are probably well worth the small amount of time and energy to download and install.  One note, make sure you uncheck the items you don’t want (you can add them later if you change your mind) and pay close attention to the attemp to change (and lock) your browser’s home page and search tool.

Microsoft Live Essentials

Free EMail…

Right LOL

Most of you probably think that the free email provider you’re using makes money by showing you those annoying advertisements when you access you email via their web-mail interface.

Have you ever stopped to think about how they could possibly make money when they allow you to use a POP3 or IMAP4 client to read your email?

Well, the bottom line is sure they make some money by showing you those advertisements; but in this day and age almost every single email provider actually uses the content of your inbox to target you and sell demographic information.

While they might not be “reading” your email line-by-line; they are certainly indexing your email’s content — and they’re selling information about what you (aggregated of course) are talking about to anyone who will pay for it… and of course it’s long be rumored that some of them might have agreements with “men in black” to provide them more details about email (and searches) that might be consider a threat to national security.

Read the Terms of Service (TOS) for your “free” email provider very carefully — you’re going to be surprised what you’ve authorized them to do, and how little privacy you really have (remember some of the cable companies and DSL providers actually have you using one of those “big name” email providers as well — so your “for-pay” email account might be suspect as well).

My advice…

If you care about your privacy, pay a little money with an email provider that doesn’t harvest your personal (and confidential) information and sell it off to everyone with a little pocket change.

Does your mail provider really want to eliminate SPAM?

I’ve been actively working to stop SPAM (that’s also known as UCE – Unsolicited Commercial Email) for a very long time, and it’s great to see how many of the “free” email providers talk about preventing SPAM and provide users with filters to prevent SPAM from reaching their inbox.

But, the bottom line is, that unless you actively report SPAMmers nothing will ever really change.

Some providers (very few) actually will generate automated SPAM reports for you [that's great, more email providers should make it that easy]; however, most will do nothing more than use an email that you mark as SPAM to refine their filters [which might prevent you from seeing the SPAM, but it doesn't stop the SPAMmer].

The really interesting thing is that many of the “free” email providers actually inhibit you from reporting SPAM by preventing you from accessing the “raw message” (you need all the headers and the body of the email to file an abuse report with most carriers).  What’s really funny is that some of the providers who are most vocal have actually changed their web-mail interfaces to prevent you from accessing the raw message [essentially insuring that you cannot take action against a SPAMmer].

Now if you can access you email via POP3 or IMAP4 or load it into an email client using a proprietary connector (well, at least the only ones I could test) you can access the raw message and file a report; but remember, many of the free email providers don’t give you that type of access to your email unless you pay them.

What a great message… it’s OK to SPAM free email subscribers because they can’t do anything about it!

I’m not going to provide an extensive list of those providers that do and do not actually enable you to report SPAM; I’ll just mention that Yahoo! (one of the largest free email providers, but waning) doesn’t allow free subscribers to access raw message (or if they do, I certainly couldn’t figure out how); and of course Google (GMail) and Microsoft (MSN/HotMail/Live/Bing) do allow access.

One other thing to keep in mind… there’s no such thing as free email — you’re paying for it some how some way.

Beware of vendors that support SPAM!

I’ve know for a very long time that many websites that sell goods and services to consumers also sell (or trade) the email addresses they register.

SPAM (Unsolicited Commercial Email – UCE) is when any entity sends you an email soliciting money for goods or services that you have not specifically requested.

Thus, when one company provided email marketers your email address (without your express permission) they are supporting SPAM, and companies that support SPAM are no better than the SPAMmers themselves since they are making money from SPAM.

But how would you know who sold your email address?

That’s easy, for years I’ve provided each vendor I do business with a unique email address which tracks any and all mail back to them.

Recently I found that a company I purchased a couple items from — CDR DVD Media ( www.cdrdvdrmedia.com ) sold or traded my email address to an email marketer.  What’s really funny in this is that CDR DVD Media uses Yahoo! (a company that purports to oppose SPAMming and hold it customers to high anti-SPAM standards) to process orders (so it appears it’s easy for Yahoo to talk the talk, but maybe they should walk the walk and actually adopt a ZERO tolerance policy against SPAMmers and their customers that support them — oh right, that means Yahoo would cut into it’s revenue stream, and they really probably only want to prevent SPAMming from free customers).

My policy (and I recommend it become you policy) is that you NEVER do business with SPAMmers or companies that support SPAMming.  Of course, I warned of the growing problem of SPAM/UCE over 15 years ago… and it’s easy for any and everyone to see now what burying your head in the sand does to prevent greedy marketers from breaking the law (yeah — SPAM is against the law in a number of states; and often SPAMmers steal services to send out their message).