RE: [Asrg] seeking comments on new RMX article

"Hallam-Baker, Phillip" <pbaker@verisign.com> Thu, 08 May 2003 01:23 UTC

Received: from www1.ietf.org (ietf.org [132.151.1.19] (may be forged)) by ietf.org (8.9.1a/8.9.1a) with ESMTP id VAA26504 for <asrg-archive@odin.ietf.org>; Wed, 7 May 2003 21:23:57 -0400 (EDT)
Received: (from mailnull@localhost) by www1.ietf.org (8.11.6/8.11.6) id h481XBR13041 for asrg-archive@odin.ietf.org; Wed, 7 May 2003 21:33:11 -0400
Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h481XB813038 for <asrg-web-archive@optimus.ietf.org>; Wed, 7 May 2003 21:33:11 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id VAA26449; Wed, 7 May 2003 21:23:27 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19DaA7-0006o3-00; Wed, 07 May 2003 21:25:31 -0400
Received: from ietf.org ([132.151.1.19] helo=www1.ietf.org) by ietf-mx with esmtp (Exim 4.12) id 19DaA6-0006o0-00; Wed, 07 May 2003 21:25:30 -0400
Received: from www1.ietf.org (localhost.localdomain [127.0.0.1]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h481V8812733; Wed, 7 May 2003 21:31:08 -0400
Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h47DUW815691 for <asrg@optimus.ietf.org>; Wed, 7 May 2003 09:30:32 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA29570 for <asrg@ietf.org>; Wed, 7 May 2003 09:21:02 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19DOt1-0001A7-00 for asrg@ietf.org; Wed, 07 May 2003 09:23:07 -0400
Received: from pigeon.verisign.com ([65.205.251.71]) by ietf-mx with esmtp (Exim 4.12) id 19DOt1-0001A4-00 for asrg@ietf.org; Wed, 07 May 2003 09:23:07 -0400
Received: from mou1wnexc01.verisign.com (verisign.com [65.205.251.53]) by pigeon.verisign.com (8.12.9/) with ESMTP id h47DNu5A010555; Wed, 7 May 2003 06:23:56 -0700 (PDT)
Received: by mou1wnexc01.verisign.com with Internet Mail Service (5.5.2653.19) id <KC9J6H93>; Wed, 7 May 2003 06:23:56 -0700
Message-ID: <CE541259607DE94CA2A23816FB49F4A301AE2447@vhqpostal6.verisign.com>
From: "Hallam-Baker, Phillip" <pbaker@verisign.com>
To: 'Alan DeKok' <aland@freeradius.org>, asrg@ietf.org
Subject: RE: [Asrg] seeking comments on new RMX article
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2653.19)
Content-Type: text/plain; charset="iso-8859-1"
Sender: asrg-admin@ietf.org
Errors-To: asrg-admin@ietf.org
X-BeenThere: asrg@ietf.org
X-Mailman-Version: 2.0.12
Precedence: bulk
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=unsubscribe>
List-Id: Anti-Spam Research Group - IRTF <asrg.ietf.org>
List-Post: <mailto:asrg@ietf.org>
List-Help: <mailto:asrg-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=subscribe>
List-Archive: <https://www1.ietf.org/pipermail/asrg/>
Date: Wed, 07 May 2003 06:23:55 -0700

>   When you receive a message with an envelope 'from' in a domain, has
> that domain consented to the use of it's name?  Right now, we don't
> know.  With something like RMX, the owners of that domain can make
> their consent explicit.

The opponents of RMX seem to live in a world where there are two choices,
delivering the mail and sending it to the bit bucket.

That is NOT what is being proposed. What is actually being proposed is
a three choice system - Deliver, Spam-Filter and Bit-Bucket.

The reason for this is that we can see that in the near future the
spam filtering criteria are going to escalate like mad. So getting
your mail through will be harder. 

Getting caught in the spam trap will be almost as bad as going to
the bit bucket direct at some stage.


If I have proof a message came from the hotmail servers and I know
that they employ rate limiting the chance that the message is spam
is small. so the message can either be delivered immediately or 
spam filtered with a much lower level of suspicion.

Of course there are circumstances that RMX does not address and
there are a couple of problems with the degree of authentication.
in particular we already have problems with spam senders stealing
unused IP address blocks. RMX could create an incentive to start
DNS spoofing and advertising BGP routes for blocks that are in
use.


		Phill
_______________________________________________
Asrg mailing list
Asrg@ietf.org
https://www1.ietf.org/mailman/listinfo/asrg