Re: [Asrg] 6 - Yahoo Domain Keys

"George Ou" <george_ou@netzero.com> Thu, 20 May 2004 04:47 UTC

Received: from optimus.ietf.org (www.iesg.org [132.151.1.19]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id AAA12977 for <asrg-archive@odin.ietf.org>; Thu, 20 May 2004 00:47:39 -0400 (EDT)
Received: from localhost.localdomain ([127.0.0.1] helo=www1.ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 1BQfR6-0000aI-VF for asrg-archive@odin.ietf.org; Thu, 20 May 2004 00:45:41 -0400
Received: (from exim@localhost) by www1.ietf.org (8.12.8/8.12.8/Submit) id i4K4jeuQ002244 for asrg-archive@odin.ietf.org; Thu, 20 May 2004 00:45:40 -0400
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 1BQfNx-0007yP-Ti for asrg-web-archive@optimus.ietf.org; Thu, 20 May 2004 00:42:26 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id AAA12793 for <asrg-web-archive@ietf.org>; Thu, 20 May 2004 00:42:22 -0400 (EDT)
Received: from ietf-mx.ietf.org ([132.151.6.1] helo=ietf-mx) by ietf-mx with esmtp (Exim 4.32) id 1BQfNv-0007G0-C0 for asrg-web-archive@ietf.org; Thu, 20 May 2004 00:42:23 -0400
Received: from exim by ietf-mx with spam-scanned (Exim 4.12) id 1BQfN1-00077K-00 for asrg-web-archive@ietf.org; Thu, 20 May 2004 00:41:28 -0400
Received: from optimus.ietf.org ([132.151.1.19]) by ietf-mx with esmtp (Exim 4.12) id 1BQfMX-0006yQ-00 for asrg-web-archive@ietf.org; Thu, 20 May 2004 00:40:57 -0400
Received: from localhost.localdomain ([127.0.0.1] helo=www1.ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 1BQfGp-0006MD-P2; Thu, 20 May 2004 00:35:03 -0400
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 1BQfDR-0005WJ-KK for asrg@optimus.ietf.org; Thu, 20 May 2004 00:31:33 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id AAA12372 for <asrg@ietf.org>; Thu, 20 May 2004 00:31:30 -0400 (EDT)
Received: from ietf-mx.ietf.org ([132.151.6.1] helo=ietf-mx) by ietf-mx with esmtp (Exim 4.32) id 1BQfDP-0005bi-2g for asrg@ietf.org; Thu, 20 May 2004 00:31:31 -0400
Received: from exim by ietf-mx with spam-scanned (Exim 4.12) id 1BQfCS-0005SJ-00 for asrg@ietf.org; Thu, 20 May 2004 00:30:32 -0400
Received: from [216.226.168.57] (helo=sv-IAS2.fjcs.net) by ietf-mx with esmtp (Exim 4.12) id 1BQfC3-0005I2-00 for asrg@ietf.org; Thu, 20 May 2004 00:30:07 -0400
Received: from goui815 ([172.16.75.250]) by sv-IAS2.fjcs.net with Microsoft SMTPSVC(6.0.3790.0); Wed, 19 May 2004 21:29:37 -0700
Message-ID: <000d01c43e23$10332020$fa4b10ac@fpcad.fujitsupc.com>
From: George Ou <george_ou@netzero.com>
To: Barry Shein <bzs@world.std.com>
Cc: Barry Shein <bzs@world.std.com>, Chris <asrg@rebel.com.au>, Yakov Shafranovich <research@solidmatrix.com>, ASRG <asrg@ietf.org>
References: <40AAB82D.3090004@solidmatrix.com><GPEMJLCHICHEGPOKJHHDCELEHPAA.asrg@rebel.com.au><16555.56412.585254.961521@world.std.com><000b01c43df9$303d20c0$fa4b10ac@fpcad.fujitsupc.com> <16556.898.797391.37361@world.std.com>
Subject: Re: [Asrg] 6 - Yahoo Domain Keys
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1409
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
X-OriginalArrivalTime: 20 May 2004 04:29:37.0315 (UTC) FILETIME=[0F355F30:01C43E23]
Content-Transfer-Encoding: 7bit
Sender: asrg-admin@ietf.org
Errors-To: asrg-admin@ietf.org
X-BeenThere: asrg@ietf.org
X-Mailman-Version: 2.0.12
Precedence: bulk
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=unsubscribe>
List-Id: Anti-Spam Research Group - IRTF <asrg.ietf.org>
List-Post: <mailto:asrg@ietf.org>
List-Help: <mailto:asrg-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=subscribe>
List-Archive: <https://www1.ietf.org/mail-archive/working-groups/asrg/>
Date: Wed, 19 May 2004 21:29:38 -0700
X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on ietf-mx.ietf.org
X-Spam-Status: No, hits=0.2 required=5.0 tests=AWL autolearn=no version=2.60
Content-Transfer-Encoding: 7bit
Content-Transfer-Encoding: 7bit

----- Original Message ----- 
From: "Barry Shein" <bzs@world.std.com>
To: "George Ou" <george_ou@netzero.com>
Cc: "Barry Shein" <bzs@world.std.com>; "Chris" <asrg@rebel.com.au>; "Yakov
Shafranovich" <research@solidmatrix.com>; "ASRG" <asrg@ietf.org>
Sent: Wednesday, May 19, 2004 6:01 PM
Subject: Re: [Asrg] 6 - Yahoo Domain Keys


> On May 19, 2004 at 16:29 george_ou@netzero.com (George Ou) wrote:
>  > But they only get to spew spam from fxbrezd.com once with their brand
>  > spanking new SPF/CallerID/Domain Key for a few days.  Once it becomes
clear
>  > that fxbrezd.com is a spammer, then you permanently blacklist that
entire
>  > domain and announce it to the entire world so that no one else will
ever
>  > receive mail from fxbrezd.com again.  Yes, they can still register
1000s of
>  > domains, but its a bit more difficult.  From that point on, the
registrars
>  > need to be pressured to track these people down and the law needs to
>  > severely penalize them.  Additionally, at least you won't be receiving
junk
>  > from the hundreds of thousands of zombies out there.
>
> The optimism is touching, particularly the part about "the law needs
> to severely penalize them". That's a big hole you're filling in with a
> worldview that unfortunately hasn't had much credence thus far.
>
> -- 
>         -Barry Shein

I realize that my optimism may be misguided, and the more I look into these
things the more jaded I become like yourself.  However, should we not try at
all?  Right now, the government makes laws that have little or no use in the
fight against spam.  If we force the spammer to at least make bulk purchases
of Domain names, rather than using anonymous zombies with impunity, there is
a much better chance we can track down who is doing the spamming and try to
make some partially effective laws.  I'm sure any of these anti-spam
measures have counter measures, but does that mean we don't even try?
Having a reliable domain authentication system in SMTP that is widely used
may not be the solution, but at least a step in the right direction.

George


_______________________________________________
Asrg mailing list
Asrg@ietf.org
https://www1.ietf.org/mailman/listinfo/asrg