Re: [Asrg] Authentication tokens

"Jon Kyme" <jrk@merseymail.com> Sat, 21 June 2003 09:56 UTC

Received: from www1.ietf.org (ietf.org [132.151.1.19] (may be forged)) by ietf.org (8.9.1a/8.9.1a) with ESMTP id FAA04984 for <asrg-archive@odin.ietf.org>; Sat, 21 Jun 2003 05:56:31 -0400 (EDT)
Received: (from exim@localhost) by www1.ietf.org (8.11.6/8.11.6) id h5L9u4I14914 for asrg-archive@odin.ietf.org; Sat, 21 Jun 2003 05:56:04 -0400
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 19Tf6K-0003sT-HG for asrg-web-archive@optimus.ietf.org; Sat, 21 Jun 2003 05:56:04 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id FAA04977; Sat, 21 Jun 2003 05:56:00 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19Tf6H-0006nJ-00; Sat, 21 Jun 2003 05:56:01 -0400
Received: from ietf.org ([132.151.1.19] helo=optimus.ietf.org) by ietf-mx with esmtp (Exim 4.12) id 19Tf6G-0006nG-00; Sat, 21 Jun 2003 05:56:00 -0400
Received: from localhost.localdomain ([127.0.0.1] helo=www1.ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 19Tf6H-0003qb-HF; Sat, 21 Jun 2003 05:56:01 -0400
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 19Tf5P-0003qG-5L for asrg@optimus.ietf.org; Sat, 21 Jun 2003 05:55:07 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id FAA04973 for <asrg@ietf.org>; Sat, 21 Jun 2003 05:55:03 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19Tf5L-0006nD-00 for asrg@ietf.org; Sat, 21 Jun 2003 05:55:03 -0400
Received: from argon.connect.org.uk ([193.110.243.33]) by ietf-mx with esmtp (Exim 4.12) id 19Tf5L-0006nA-00 for asrg@ietf.org; Sat, 21 Jun 2003 05:55:03 -0400
Received: from mmail by argon.connect.org.uk with local (connectmail/exim) id 19Tf5K-0006a7-00; Sat, 21 Jun 2003 10:55:02 +0100
In-Reply-To: <B0000024129@nts1.terabites.com>
Subject: Re: [Asrg] Authentication tokens
To: gep2@terabites.com
From: Jon Kyme <jrk@merseymail.com>
Cc: ASRG <asrg@ietf.org>
X-Mailer: [ConnectMail 3.5.7]
X-connectmail-Originating-IP: 193.195.0.101
Message-Id: <E19Tf5K-0006a7-00@argon.connect.org.uk>
Sender: asrg-admin@ietf.org
Errors-To: asrg-admin@ietf.org
X-BeenThere: asrg@ietf.org
X-Mailman-Version: 2.0.12
Precedence: bulk
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=unsubscribe>
List-Id: Anti-Spam Research Group - IRTF <asrg.ietf.org>
List-Post: <mailto:asrg@ietf.org>
List-Help: <mailto:asrg-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=subscribe>
List-Archive: <https://www1.ietf.org/pipermail/asrg/>
Date: Sat, 21 Jun 2003 10:55:02 +0100

>ISP's e-mail logs ALREADY give those ISPs a list of everyone you've ever 
>received mail from, or sent mail to, so I think your argument doesn't
>really
>impress me very much.
>

Will people *please* stop baldly asserting this. As far as I know, most
providers in the UK / EU do not retain traffic data for any longer than
they *have to* ( for business purposes ), the concern is that it may be
illegal to do anything more. In other jurisdictions where these concerns do
not apply, providers may have data retention policies in place for other
reasons.

The difference is that while mail logs MAY preserve some traffic data, many
proposals made in this group require that this data MUST be kept.
Accordingly, the burden of "securing" it is higher.






--

_______________________________________________
Asrg mailing list
Asrg@ietf.org
https://www1.ietf.org/mailman/listinfo/asrg