Re: [Asrg] Spam button scenarios

["Chris Lewis" <[e-mail]>]

John R. Levine wrote:
> Here's some scenarios in which I'm not sure what the best thing is to do.
> 
> A) User has multiple incoming accounts, presses the spam button, and the 
> outbound MSA doesn't match the incoming account.  Hence the report goes 
> via unrelated third parties that might snoop on it.  Do we care?  The user 
> has said it's spam, after all.

I'm leaning back towards inband (eg: RFC5451 AR header as extended), 
thus your B is moot, and addressing choices (sans trust issues) is trivial.

> C) I have a Gmail account and a Yahoo account.  The Gmail account is set 
> up to fetch my Yahoo mail so I can see it all in one place.  I use Gmail's 
> IMAP server to read my mail.  (I really do this, by the way.)  I hit the 
> spam button.  Who should get the report?

>   1) Gmail since that's who I picked it up from
>   2) Yahoo since that's where the spam was sent
>   3) Gmail but they should also forward the report to Yahoo

Very much Gmail.  If they want to chain it back to Yahoo as part of 
their FBL, they can.