Re: [Asrg] We don't need no stinkin IMAP or POP, was Adding a spam button to MUAs

"Chris Lewis" <> Sat, 06 February 2010 17:29 UTC

Return-Path: <>
Received: from localhost (localhost []) by (Postfix) with ESMTP id AEC563A70C7 for <>; Sat, 6 Feb 2010 09:29:21 -0800 (PST)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -6.44
X-Spam-Status: No, score=-6.44 tagged_above=-999 required=5 tests=[AWL=0.003, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, SUBJECT_FUZZY_TION=0.156]
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id LgaDbgHacNdU for <>; Sat, 6 Feb 2010 09:29:20 -0800 (PST)
Received: from ( []) by (Postfix) with ESMTP id A586D3A70C5 for <>; Sat, 6 Feb 2010 09:29:20 -0800 (PST)
Received: from ( []) by (Switch-2.2.0/Switch-2.2.0) with ESMTP id o16HUA004903 for <>; Sat, 6 Feb 2010 17:30:11 GMT
Received: from ([]) by with Microsoft SMTPSVC(6.0.3790.3959); Sat, 6 Feb 2010 12:30:10 -0500
Received: from [] ( by ( with Microsoft SMTP Server (TLS) id 8.1.340.0; Sat, 6 Feb 2010 12:30:10 -0500
Message-ID: <>
Date: Sat, 6 Feb 2010 12:29:56 -0500
From: "Chris Lewis" <>
Organization: Nortel
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv: Gecko/20090812 Lightning/0.9 Thunderbird/ Mnenhy/
MIME-Version: 1.0
To: Anti-Spam Research Group - IRTF <>
References: <>
In-Reply-To: <>
Content-Type: text/plain; charset="ISO-8859-1"; format=flowed
Content-Transfer-Encoding: 7bit
X-OriginalArrivalTime: 06 Feb 2010 17:30:10.0454 (UTC) FILETIME=[08754360:01CAA752]
Subject: Re: [Asrg] We don't need no stinkin IMAP or POP, was Adding a spam button to MUAs
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: Anti-Spam Research Group - IRTF <>
List-Id: Anti-Spam Research Group - IRTF <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Sat, 06 Feb 2010 17:29:21 -0000

John Levine wrote:
>> Make the ARF reporting address a configurable option, but default it to 
>> a role account at the email domain of the machine from which incoming 
>> mail is obtained.
> Now it's not opt-in by the mailstore provider.

We need to have it self-configuring if the mailstore provides the 
service.  Which either means a standard role account for it, or, some 
way for the mailstore to tell the UA what address to use.

IOW: pure user configurable doesn't do that.

In-stream configuration (via MDA or MTA) would work, but it requires the 
MDA/MTA be modified.  Which we're avoiding.

We've been talking about using DNS for some of the signalling.  You 
could specify a "_report.<mailstore hostname>" TXT record that specifies 
the address (which isn't necessarily in the mailstore's domain) to send 
it _and_ its very existence shows that the mailstore provider supports 
the functionality (and thus the TiS button gets enabled).

Now, if the TXT record doesn't exist, we could suggest that the user 
could set their own abuse report destination.  But I'd rather not get 
into a situation where the user overrides the mailstore's explicit choice.