Re: [Asrg] Two ways to look at spam

Bruce Stephens <Bruce.Stephens@isode.com> Wed, 02 July 2003 14:55 UTC

Received: from optimus.ietf.org (ietf.org [132.151.1.19] (may be forged)) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA25956 for <asrg-archive@odin.ietf.org>; Wed, 2 Jul 2003 10:55:43 -0400 (EDT)
Received: from localhost.localdomain ([127.0.0.1] helo=www1.ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 19Xj0u-0005WB-Vp for asrg-archive@odin.ietf.org; Wed, 02 Jul 2003 10:55:17 -0400
Received: (from exim@localhost) by www1.ietf.org (8.12.8/8.12.8/Submit) id h62EtGwq021205 for asrg-archive@odin.ietf.org; Wed, 2 Jul 2003 10:55:16 -0400
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 19Xj0u-0005Vw-S0 for asrg-web-archive@optimus.ietf.org; Wed, 02 Jul 2003 10:55:16 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA25931; Wed, 2 Jul 2003 10:55:12 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19Xj0s-0001Zz-00; Wed, 02 Jul 2003 10:55:14 -0400
Received: from ietf.org ([132.151.1.19] helo=optimus.ietf.org) by ietf-mx with esmtp (Exim 4.12) id 19Xj0r-0001Zv-00; Wed, 02 Jul 2003 10:55:13 -0400
Received: from localhost.localdomain ([127.0.0.1] helo=www1.ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 19Xj0f-0005Sf-6E; Wed, 02 Jul 2003 10:55:01 -0400
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 19Xizr-0005Rw-NT for asrg@optimus.ietf.org; Wed, 02 Jul 2003 10:54:11 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA25875 for <asrg@ietf.org>; Wed, 2 Jul 2003 10:54:07 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19Xizp-0001YQ-00 for asrg@ietf.org; Wed, 02 Jul 2003 10:54:09 -0400
Received: from usergg026.dsl.pipex.com ([62.190.174.26]) by ietf-mx with esmtp (Exim 4.12) id 19Xizn-0001Y8-00 for asrg@ietf.org; Wed, 02 Jul 2003 10:54:08 -0400
Received: from cenderis.demon.co.uk ([62.49.17.254]) by usergg026.dsl.pipex.com via TCP (with SMTP (internal)) with ESMTP for <asrg@ietf.org>; Wed, 2 Jul 2003 15:53:33 +0100
To: ASRG <asrg@ietf.org>
Subject: Re: [Asrg] Two ways to look at spam
References: <E19Xgcc-000219-00@argon.connect.org.uk>
From: Bruce Stephens <Bruce.Stephens@isode.com>
In-Reply-To: <E19Xgcc-000219-00@argon.connect.org.uk> (Jon Kyme's message of "Wed, 02 Jul 2003 13:22:02 +0100")
Message-ID: <84ptkt3rqf.fsf@cenderis.demon.co.uk>
User-Agent: Gnus/5.1003 (Gnus v5.10.3) Emacs/21.3 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Sender: asrg-admin@ietf.org
Errors-To: asrg-admin@ietf.org
X-BeenThere: asrg@ietf.org
X-Mailman-Version: 2.0.12
Precedence: bulk
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=unsubscribe>
List-Id: Anti-Spam Research Group - IRTF <asrg.ietf.org>
List-Post: <mailto:asrg@ietf.org>
List-Help: <mailto:asrg-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=subscribe>
List-Archive: <https://www1.ietf.org/pipermail/asrg/>
Date: Wed, 02 Jul 2003 15:53:12 +0100

"Jon Kyme" <jrk@merseymail.com> writes:

[...]

>> The former would be useful, but I'm doubtful that it would have much
>> of an impact on spam.  The latter seems to me to rely on the sender
>> accurately tagging their messages according to content---possibly that
>> would happen often enough that it would be worthwhile, but I'm not
>> sure that it would.
>
> I'm not sure about this, there seems to me (at the most general) to be
> only one class of things that need be asserted in a consent expression: How
> this message is classified by some engine. Your second class seems to me to
> be the sort of thing that's routinely handled by content-filters
> (imperfectly, I grant you).
>
> So rather than saying:
> 1. message has html => noconsent
> 2. message mentions 'septic tank enhancement' => consent
> 3. message is from grandma => consent
> 4. message has valid consent token => consent
> 5. message has blacklisted source IP => noconsent
> etc ...
>
> You might say something more like
> positive_test(name_of_engine_1, engineargs, message) => noconsent 
> positive_test(name_of_engine_2, engineargs, message) => consent 
> etc...

I guess someone could standardise this (using whatever language they
wanted), and there are some kinds of content filter (probably quite
simple things---the sort of thing that SIEVE can do, say) that we
could standardise on.  That might be useful.

It's not a solution to spam, though, because some things really are
things that can't be checked automatically, so the content filtering
will be imperfect.  And (if it were to be standardised) we can expect
it to become more and more imperfect.

[...]



_______________________________________________
Asrg mailing list
Asrg@ietf.org
https://www1.ietf.org/mailman/listinfo/asrg