Re: [Asrg] An Anti-Spam Heuristic

"John Levine" <johnl@taugh.com> Thu, 13 December 2012 03:54 UTC

Return-Path: <johnl@iecc.com>
X-Original-To: asrg@ietfa.amsl.com
Delivered-To: asrg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E0A5A21F88EA for <asrg@ietfa.amsl.com>; Wed, 12 Dec 2012 19:54:49 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.525
X-Spam-Level:
X-Spam-Status: No, score=-106.525 tagged_above=-999 required=5 tests=[AWL=0.374, BAYES_00=-2.599, HABEAS_ACCREDITED_SOI=-4.3, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0Eb-V41ZlTjQ for <asrg@ietfa.amsl.com>; Wed, 12 Dec 2012 19:54:48 -0800 (PST)
Received: from leila.iecc.com (leila6.iecc.com [IPv6:2001:470:1f07:1126:0:4c:6569:6c61]) by ietfa.amsl.com (Postfix) with ESMTP id 9928621F889C for <asrg@irtf.org>; Wed, 12 Dec 2012 19:54:48 -0800 (PST)
Received: (qmail 69406 invoked from network); 13 Dec 2012 03:54:46 -0000
Received: from leila.iecc.com (64.57.183.34) by mail1.iecc.com with QMQP; 13 Dec 2012 03:54:46 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com; h=date:message-id:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:vbr-info; s=50c95186.xn--9vv.k1212; i=johnl@user.iecc.com; bh=+5lCK6J5J/zIJrTxO0FXcAElKEpmGr9rRXF21l2Ul8g=; b=UxAv9E5rvXMrrWDUIOK9KgBgRcZxqOvrEBfLfjyav8wdFEHGNzoC/DyLcot3jb5eJeQDYJ02RtJEj78zfAfemzAYz/XWFTLZSUf6dGUOh+jtdUKi31J9ntmgYxF5tnSxd8kwhwl0XStaJlLWjtMMlngrkpGNbz+ilk0gJ1nAeuY=
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=taugh.com; h=date:message-id:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:vbr-info; s=50c95186.xn--9vv.k1212; olt=johnl@user.iecc.com; bh=+5lCK6J5J/zIJrTxO0FXcAElKEpmGr9rRXF21l2Ul8g=; b=RITE4sLmwBdmWDxdlvlf53BV4OJ3rHekYkMCdw07ygf6JCNrTmMA5uKCnXjPqRwvm+PM3zOn+d6X3ZqPTXb4TPf2q9E5kWpOn5x03ssQplBlvcBZvuhMq0ViDVe+8R3n8GQoj5twznngqYgTyTC4Ym4UEOEFd64DIiFK4WXjwME=
VBR-Info: md=iecc.com; mc=all; mv=dwl.spamhaus.org
Date: 13 Dec 2012 03:54:23 -0000
Message-ID: <20121213035423.13881.qmail@joyce.lan>
From: "John Levine" <johnl@taugh.com>
To: asrg@irtf.org
In-Reply-To: <DA14FA4D-13CB-4C61-90C4-4E690F0EC745@blighty.com>
Organization:
X-Headerized: yes
Mime-Version: 1.0
Content-type: text/plain; charset=utf-8
Content-transfer-encoding: 7bit
Subject: Re: [Asrg] An Anti-Spam Heuristic
X-BeenThere: asrg@irtf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: Anti-Spam Research Group - IRTF <asrg@irtf.org>
List-Id: Anti-Spam Research Group - IRTF <asrg.irtf.org>
List-Unsubscribe: <http://www.irtf.org/mailman/options/asrg>, <mailto:asrg-request@irtf.org?subject=unsubscribe>
List-Archive: <http://www.irtf.org/mail-archive/web/asrg>
List-Post: <mailto:asrg@irtf.org>
List-Help: <mailto:asrg-request@irtf.org?subject=help>
List-Subscribe: <http://www.irtf.org/mailman/listinfo/asrg>, <mailto:asrg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Thu, 13 Dec 2012 03:54:50 -0000

>You might want to look at hashcash. http://en.wikipedia.org/wiki/Hashcash
>
>Brief summary of the conclusion: cannot work, as spammers have much easier
>access to free CPU cycles than do legitimate senders of mail.

I wrote a white paper about e-postage eight years ago, which has stood
up pretty well.  There are other fatal issues, related to the need to
whitelist mail from people whose mail you want to get.

http://www.taugh.com/epostage.pdf