Re: [ietf-smtp] Possible contribution to moving forward with RFC5321bis SMTP

["John Levine" <[e-mail]>]

In article <[e-mail]> you write:
>And since this would be entirely new practice, it would at least be 
>possible to require Organization Validation or Extended Validation 
>certificates as a condition of accepting mail, or more likely, as a 
>condition of not pessimizing mail... and/or set up email-specific CAs 
>for the purpose of authenticating SMTP clients.

It's still a WKBI.  Whitelisting by source doesn't work at scale, and
for source scoring, I don't see any reason that a cert would tell you
anything more useful than an IP and a host name.  It's not like we have
any trouble now telling when mail is coming from Google or Yahoo or
the university down the road.

R's,
John