Re: [domainrep] Updated documents prior to IETF LC

"John Levine" <johnl@taugh.com> Sat, 13 July 2013 18:42 UTC

Return-Path: <johnl@iecc.com>
X-Original-To: domainrep@ietfa.amsl.com
Delivered-To: domainrep@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CC2A221F9A5B for <domainrep@ietfa.amsl.com>; Sat, 13 Jul 2013 11:42:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -110.75
X-Spam-Level:
X-Spam-Status: No, score=-110.75 tagged_above=-999 required=5 tests=[AWL=0.449, BAYES_00=-2.599, HABEAS_ACCREDITED_SOI=-4.3, RCVD_IN_BSP_TRUSTED=-4.3, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HS+qoGygL4F5 for <domainrep@ietfa.amsl.com>; Sat, 13 Jul 2013 11:42:39 -0700 (PDT)
Received: from leila.iecc.com (leila6.iecc.com [IPv6:2001:470:1f07:1126:0:4c:6569:6c61]) by ietfa.amsl.com (Postfix) with ESMTP id 113F021F9AAE for <domainrep@ietf.org>; Sat, 13 Jul 2013 11:42:36 -0700 (PDT)
Received: (qmail 11127 invoked from network); 13 Jul 2013 18:42:35 -0000
Received: from leila.iecc.com (64.57.183.34) by mail1.iecc.com with QMQP; 13 Jul 2013 18:42:35 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding; s=51e19f9b.xn--30v786c.k1307; i=johnl@user.iecc.com; bh=/bA2vG0lnaLxqzJVUIMtkcgItYyVYmW3huTJxrYtP2I=; b=zvm0M8YEVG6WjSLJhdNZafmhbcIJ3IqwDOGROcp/tAL9nL+E83OtKSwJo+E2Ky/zenrUL6JqTwLmdosNSxpO7BPIHNM1r38m/yLXixvIS3UxhJiFG7auKuOx/rMei4OrSw6HPBv4ipnZtgq/IeJb6m/bXnoy+IXcWwXG1TsOvGlLw5dLZxugVSRx4KpdAPYP5EBuBPRoZvpsGyN9apkalTmfTeMOAq44O403CXszHU/m7qvlCVFUM+P3IES2ucwS
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=taugh.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding; s=51e19f9b.xn--30v786c.k1307; olt=johnl@user.iecc.com; bh=/bA2vG0lnaLxqzJVUIMtkcgItYyVYmW3huTJxrYtP2I=; b=tlfyn6iyvLN6/xYZuQ5zxlghVDWcHA80jf0scsjl+/auN4gvUvEcUaQkQdcckdtZwKayjSuZTCAFzG5ilaPtl0Zyico7RzhjS8j7FhiZzCB5zZbmCu9ldE3/1cFQeNeL4gFore9/nVqNKQoCcYvFWc4g1BJCwsSK5K0wMu26CAbGih3PWmEaCmSrrEO6r2K0QFsaJf2mEvoTICSXHhiLyedoktPq9ELgmptThXkaMlIdct+zC4tiAshnB3fsuwgu
Date: 13 Jul 2013 18:42:13 -0000
Message-ID: <20130713184213.39838.qmail@joyce.lan>
From: "John Levine" <johnl@taugh.com>
To: domainrep@ietf.org
In-Reply-To: <alpine.BSF.2.00.1307130131020.62942@joyce.lan>
Organization:
X-Headerized: yes
Mime-Version: 1.0
Content-type: text/plain; charset=utf-8
Content-transfer-encoding: 8bit
Cc: johnl@taugh.com
Subject: Re: [domainrep] Updated documents prior to IETF LC
X-BeenThere: domainrep@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Domain Reputation discussion list <domainrep.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/domainrep>, <mailto:domainrep-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/domainrep>
List-Post: <mailto:domainrep@ietf.org>
List-Help: <mailto:domainrep-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/domainrep>, <mailto:domainrep-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 13 Jul 2013 18:42:43 -0000

In article <alpine.BSF.2.00.1307130131020.62942@joyce.lan> you write:
>> Think of it as the likelihood that a bad rating from a given user is a
>> local incident versus a trending problem.

How about this:

well-behaved: An estimate by the reputation service provider of the
long term behavior of the rated identity, expressed as a
floating-point number between 0.0 and 1.0 inclusive.  If the entity's
rating is significantly different from the well-behaved score, it is
likely an aberration.  For example, in an e-mail rating system, a high
well-behaved score and a low rating might indicate a responsible
network leaking spam due to security problems, and a low well-behaved
score and a high rating might indicate a spammer who is between
hosting providers.