RE: [Asrg] 6.I Spam elimination by mailbox lock and key

"Bob Wyman" <bob@wyman.us> Sat, 14 June 2003 22:26 UTC

Received: from www1.ietf.org (ietf.org [132.151.1.19] (may be forged)) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA06744 for <asrg-archive@odin.ietf.org>; Sat, 14 Jun 2003 18:26:07 -0400 (EDT)
Received: (from mailnull@localhost) by www1.ietf.org (8.11.6/8.11.6) id h5EMPf131714 for asrg-archive@odin.ietf.org; Sat, 14 Jun 2003 18:25:41 -0400
Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h5EMPfm31711 for <asrg-web-archive@optimus.ietf.org>; Sat, 14 Jun 2003 18:25:41 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA06740; Sat, 14 Jun 2003 18:25:37 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19RJQl-0000WW-00; Sat, 14 Jun 2003 18:23:27 -0400
Received: from ietf.org ([132.151.1.19] helo=www1.ietf.org) by ietf-mx with esmtp (Exim 4.12) id 19RJQk-0000WT-00; Sat, 14 Jun 2003 18:23:26 -0400
Received: from www1.ietf.org (localhost.localdomain [127.0.0.1]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h5EKA1a23572; Sat, 14 Jun 2003 16:10:01 -0400
Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h5EK9Rm23552 for <asrg@optimus.ietf.org>; Sat, 14 Jun 2003 16:09:27 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA03420 for <asrg@ietf.org>; Sat, 14 Jun 2003 16:09:25 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19RHIx-0007fV-00 for asrg@ietf.org; Sat, 14 Jun 2003 16:07:15 -0400
Received: from vmmrnat.verisignmail.com ([216.168.230.187] helo=mr10.verisignmail.com) by ietf-mx with esmtp (Exim 4.12) id 19RHIw-0007fR-00 for asrg@ietf.org; Sat, 14 Jun 2003 16:07:14 -0400
Received: from ms3.verisignmail.com (ms3.verisignmail.com [216.168.230.176] (may be forged)) by mr10.verisignmail.com (Mirapoint Messaging Server MOS 3.2.2-GA) with ESMTP id ABL91130; Sat, 14 Jun 2003 16:09:07 -0400 (EDT)
Received: from BOBDEV (pool-162-84-191-38.ny5030.east.verizon.net [162.84.191.38]) by ms3.verisignmail.com (Mirapoint Messaging Server MOS 3.2.2-GA) with ESMTP id AIO50010; Sat, 14 Jun 2003 16:09:07 -0400 (EDT)
Reply-To: bob@wyman.us
From: Bob Wyman <bob@wyman.us>
To: 'Selby Hatch' <selby_hatch@azza.com>, asrg@ietf.org
Subject: RE: [Asrg] 6.I Spam elimination by mailbox lock and key
Message-ID: <000801c332b0$d218a810$660aa8c0@BOBDEV>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.4024
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
In-Reply-To: <3EEA3984.9010704@azza.com>
Importance: Normal
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by www1.ietf.org id h5EK9Rm23553
Sender: asrg-admin@ietf.org
Errors-To: asrg-admin@ietf.org
X-BeenThere: asrg@ietf.org
X-Mailman-Version: 2.0.12
Precedence: bulk
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=unsubscribe>
List-Id: Anti-Spam Research Group - IRTF <asrg.ietf.org>
List-Post: <mailto:asrg@ietf.org>
List-Help: <mailto:asrg-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=subscribe>
List-Archive: <https://www1.ietf.org/pipermail/asrg/>
Date: Sat, 14 Jun 2003 16:09:11 -0400
Content-Transfer-Encoding: 8bit
Content-Transfer-Encoding: 8bit

Selby Hatch wrote:
> 2. Only senders that have a key to your mailbox can send 
> an email into your mailbox.
> 3. You will create one or more keys for your mailbox and 
> enter them into the email address book entries for the 
> persons you are giving the keys to.

	The system you have described is very similar to ones that have
been described and implemented in the past. Personally, I agree with you
that this particular method of fighting spam is likely to form part of a
very effective anti-spam system. The most interesting feature of such a
system is that it has immediate benefit to someone who adopts it and it
can be adopted by individuals rather than requiring support from ISPs,
network maintainers, etc.
	For some background on other similar proposals, check out:

A number of patents are relevant to this type of system:
http://patft.uspto.gov/netacgi/nph-Parser?patentnumber=5930479
http://patft.uspto.gov/netacgi/nph-Parser?patentnumber=6356935
http://patft.uspto.gov/netacgi/nph-Parser?patentnumber=6085321

The "Tagged Message Delivery Agent" which incorporates a similar system
of "tagged addresses" as one of its features:
http://www.tmda.net/
TMDA was inspired by Thomas Erskine's 1997 implementation of TMS
http://www.deepeddy.com/tms.html

A Forbes magazine article that suggests the use of passwords in subject
lines.
http://www.forbes.com/free_forbes/2003/0623/136.html

See the "Virtual Private Email Addresses" implemented by TitanKey
http://www.titankey.com/

Hadmut Danisch's proposal for "Mail Cookies"
https://www1.ietf.org/mail-archive/working-groups/asrg/current/msg00054.
html
A variety of notes in the ASRG archives that I wrote starting with the
one below in March...
https://www1.ietf.org/mail-archive/working-groups/asrg/current/msg00041.
html

Note: It should be realized of course, that there is a long history of
passing passwords in the headers or body of email messages in order to
authenticate access to various resources -- folk were doing this long
before any of the systems above were patented or otherwise described.

		bob wyman

_______________________________________________
Asrg mailing list
Asrg@ietf.org
https://www1.ietf.org/mailman/listinfo/asrg