Re: [Asrg] Passive Spam Revocation

Claudio Telmon <> Mon, 26 October 2009 10:55 UTC

Return-Path: <>
Received: from localhost (localhost []) by (Postfix) with ESMTP id D28C83A68F3 for <>; Mon, 26 Oct 2009 03:55:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: 0.629
X-Spam-Status: No, score=0.629 tagged_above=-999 required=5 tests=[AWL=1.349, BAYES_00=-2.599, HELO_EQ_IT=0.635, HOST_EQ_IT=1.245]
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id AtwM3z7RAEIt for <>; Mon, 26 Oct 2009 03:55:56 -0700 (PDT)
Received: from ( []) by (Postfix) with ESMTP id 73C313A681A for <>; Mon, 26 Oct 2009 03:55:55 -0700 (PDT)
Received: from ([::ffff:]) by via I-SMTP-5.6.1-561 id ::ffff:; Mon, 26 Oct 2009 11:56:07 +0100
Message-ID: <>
Date: Mon, 26 Oct 2009 11:56:59 +0100
From: Claudio Telmon <>
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv: Gecko/20090817 Lightning/0.8 Thunderbird/ Mnenhy/
MIME-Version: 1.0
To: Anti-Spam Research Group - IRTF <>
References: <> <>
In-Reply-To: <>
X-Enigmail-Version: 0.95.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Subject: Re: [Asrg] Passive Spam Revocation
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: Anti-Spam Research Group - IRTF <>
List-Id: Anti-Spam Research Group - IRTF <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Mon, 26 Oct 2009 10:55:56 -0000

Yao Ziyuan wrote:

> Showing a message's spam status to the sender can be bad, if he is
> really a spammer. So the page can also return:
>     * SPAM STATUS HIDDEN. (A CAPTCHA is also presented below.)
> This means the sender can solve the CAPTCHA to see the status and
> change it to NOT SPAM.

This would solve the problem of spammers testing the filters without
solving the captchas. However, any automated mailing system would be
unable to take advantage of the system. If the goal is just to provide
an additional mean for people to check if their messages have been
delivered, this wouldn't be a problem, but it would require some changes:
- it would be useless to automatically check for the message status
(which would be HIDDEN anyway), unless you expect people to be willing
to solve captchas for every message they send
- message status should be availabe for a long time, since people would
use this opportunity only if they somehow suspect that the message has
not been delivered


Claudio Telmon