[Asrg] Is there anything good enough?

"Alan DeKok" <aland@freeradius.org> Tue, 06 May 2003 18:29 UTC

Received: from www1.ietf.org (ietf.org [132.151.1.19] (may be forged)) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA02167 for <asrg-archive@odin.ietf.org>; Tue, 6 May 2003 14:29:12 -0400 (EDT)
Received: (from mailnull@localhost) by www1.ietf.org (8.11.6/8.11.6) id h46Ibn816726 for asrg-archive@odin.ietf.org; Tue, 6 May 2003 14:37:49 -0400
Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h46Ibm816723 for <asrg-web-archive@optimus.ietf.org>; Tue, 6 May 2003 14:37:48 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA02155; Tue, 6 May 2003 14:28:42 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19D7DD-0001E8-00; Tue, 06 May 2003 14:30:47 -0400
Received: from ietf.org ([132.151.1.19] helo=www1.ietf.org) by ietf-mx with esmtp (Exim 4.12) id 19D7DD-0001E4-00; Tue, 06 May 2003 14:30:47 -0400
Received: from www1.ietf.org (localhost.localdomain [127.0.0.1]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h46IZ3815746; Tue, 6 May 2003 14:35:03 -0400
Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h46IYF815705 for <asrg@optimus.ietf.org>; Tue, 6 May 2003 14:34:15 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA02047 for <asrg@ietf.org>; Tue, 6 May 2003 14:25:08 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19D79m-0001CC-00 for asrg@ietf.org; Tue, 06 May 2003 14:27:14 -0400
Received: from giles.striker.ottawa.on.ca ([192.139.46.36] helo=mail.nitros9.org ident=root) by ietf-mx with esmtp (Exim 4.12) id 19D79l-0001C9-00 for asrg@ietf.org; Tue, 06 May 2003 14:27:13 -0400
Received: from localhost ([127.0.0.1] helo=giles.striker.ottawa.on.ca ident=aland) by mail.nitros9.org with esmtp (Exim 3.34 #1) id 19D7LU-00078n-00 for asrg@ietf.org; Tue, 06 May 2003 14:39:20 -0400
From: Alan DeKok <aland@freeradius.org>
To: asrg@ietf.org
In-Reply-To: Your message of "Tue, 06 May 2003 10:38:59 PDT." <19744716058.20030506103859@brandenburg.com>
Message-Id: <E19D7LU-00078n-00@mail.nitros9.org>
Subject: [Asrg] Is there anything good enough?
Sender: asrg-admin@ietf.org
Errors-To: asrg-admin@ietf.org
X-BeenThere: asrg@ietf.org
X-Mailman-Version: 2.0.12
Precedence: bulk
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=unsubscribe>
List-Id: Anti-Spam Research Group - IRTF <asrg.ietf.org>
List-Post: <mailto:asrg@ietf.org>
List-Help: <mailto:asrg-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=subscribe>
List-Archive: <https://www1.ietf.org/pipermail/asrg/>
Date: Tue, 06 May 2003 14:39:20 -0400

Dave Crocker <dcrocker@brandenburg.com> wrote:
> Spoofing is bad, but it is not at all the core problem with spam.

  So there's no point in solving one part of the spam problem, because
the problem is larger than that.  Yeah, that makes sense...

> And, by the way, in the off-chance that RMX actually does achieve
> wide-scale deployment, the folks who are currently doing spoofing will
> simply move on to other techniques.

  ... other "existing" techniques.  RMX doesn't give the spammers any
new methods by which to spam.  Therefore use of RMX will change only
the frequency distribution of the use of existing techniques.
Therefore, there will be no new interaction effects.  Therefore, the
possible space allowed for spamming will be smaller and/or more
expensive.

  If implementing an anti-spam system gives sites a net benefit, it
would seem logical that they have incentive to implement it.  If the
system gives no net benefit, then there's obviously no implementation
incentive.

> I will return the favor, by suggesting that folks inform themselves
> about the realities of Internet-scale operations, Internet-scale
> deployment physics, and Internet-scale spammer adaptability.
> 
> Then, perhaps, we will not be presented with localized, near-term
> proposals that will have no impact on large-scale, long-term spamming.

  OK, I'll bite: Is there anything in SMTP practice, implementation, or
protocol that you are willing to change to fight spam?  Is there any
cost you are willing to pay to fight spam?

  Alan DeKok.
_______________________________________________
Asrg mailing list
Asrg@ietf.org
https://www1.ietf.org/mailman/listinfo/asrg