Re: Last Call: draft-irtf-asrg-dnsbl (DNS Blacklists and Whitelists)

"Steven M. Bellovin" <smb@cs.columbia.edu> Mon, 10 November 2008 04:51 UTC

Return-Path: <ietf-bounces@ietf.org>
X-Original-To: ietf-archive@megatron.ietf.org
Delivered-To: ietfarch-ietf-archive@core3.amsl.com
Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1D2563A69F7; Sun, 9 Nov 2008 20:51:23 -0800 (PST)
X-Original-To: ietf@core3.amsl.com
Delivered-To: ietf@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E52733A69F7 for <ietf@core3.amsl.com>; Sun, 9 Nov 2008 20:51:21 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.8
X-Spam-Level:
X-Spam-Status: No, score=-5.8 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, SARE_SUB_RAND_LETTRS4=0.799]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vjeVX3WMlTuc for <ietf@core3.amsl.com>; Sun, 9 Nov 2008 20:51:21 -0800 (PST)
Received: from machshav.com (machshav.com [198.180.150.44]) by core3.amsl.com (Postfix) with ESMTP id DE8763A69F3 for <ietf@ietf.org>; Sun, 9 Nov 2008 20:51:20 -0800 (PST)
Received: by machshav.com (Postfix, from userid 512) id D1E35AF684; Mon, 10 Nov 2008 04:51:17 +0000 (GMT)
Received: from yellowstone.machshav.com (localhost [127.0.0.1]) by machshav.com (Postfix) with ESMTP id 3C52DAF63E; Mon, 10 Nov 2008 04:51:17 +0000 (GMT)
Received: from cs.columbia.edu (localhost [127.0.0.1]) by yellowstone.machshav.com (Postfix) with ESMTP id 2C6C0838717; Sun, 9 Nov 2008 23:51:16 -0500 (EST)
Date: Sun, 09 Nov 2008 23:51:16 -0500
From: "Steven M. Bellovin" <smb@cs.columbia.edu>
To: Tony Hansen <tony@att.com>
Subject: Re: Last Call: draft-irtf-asrg-dnsbl (DNS Blacklists and Whitelists)
Message-ID: <20081109235116.3ef7e2f2@cs.columbia.edu>
In-Reply-To: <4917BB4B.8000802@att.com>
References: <20081107111744.GA31018@nic.fr> <20081107141821.79303.qmail@simone.iecc.com> <45AEC6EF95942140888406588E1A660206A5D881@PACDCEXCMB04.cable.comcast.com> <4914D181.9090605@network-heretics.com> <278E245FD800CC334CA5100F@klensin-asus.icannmeeting.org> <4917BB4B.8000802@att.com>
Organization: Columbia University
X-Mailer: Claws Mail 3.6.1 (GTK+ 2.14.3; x86_64--netbsd)
Mime-Version: 1.0
Cc: ietf@ietf.org
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: ietf-bounces@ietf.org
Errors-To: ietf-bounces@ietf.org

On Sun, 09 Nov 2008 23:40:43 -0500
Tony Hansen <tony@att.com> wrote:

> I'm personally very interested in getting the format for querying DNS
> *white* lists standardized. I want to be able to use DNSWLs as part of
> *positive reputation* checking: given an *authenticated* domain name
> (say, with DKIM), can we say something positive about them beyond
> "they send email"?
> 
> The protocol described in this draft covers both cases, both positive
> and negative checking.
> 
> While the majority of the examples in the document concentrates on
> negative examples, the protocol *is* useful for the positive case.
> 
> Does anyone have issues with the use of this protocol for WHITE lists?
> 
In some sense, I have more trouble with white lists than black lists.  

My concern is centralization of power.  If used properly, white lists
are fine.  If used improperly, they're a way to form an email cartel,
forcing organizations to buy email transit from a member of the inner
circle.


		--Steve Bellovin, http://www.cs.columbia.edu/~smb
_______________________________________________
Ietf mailing list
Ietf@ietf.org
https://www.ietf.org/mailman/listinfo/ietf