[Sipping] comments on draft-wing-sipping-spam-score-00

I think a key part of this is that you need to have a trust relationship 
with the sender of the score, otherwise its useless. As with any trust 
relationship, it requires authentication to make sure the guy you are 
talking to is the one you trust. This typically implies mutual TLS 
authentication between domains. It also means that you can't have more 
than one spam score at a time - just the one from the previous hop 
domain. So how would you authenticate and authorize the sources farther 
away, as this draft proposes?

It seems that, unless there is a standardized range and meaning of 
values it will be hard to take any action based on this value.

It would be good to give some examples of how an originating domain 
might compute the score.

-Jonathan R.
-- 
Jonathan D. Rosenberg, Ph.D.                   499 Thornall St.
Cisco Fellow                                   Edison, NJ 08837
Cisco, Voice Technology Group
jdrosen@cisco.com
http://www.jdrosen.net                         PHONE: (408) 902-3084
http://www.cisco.com

_______________________________________________
Sipping mailing list  https://www1.ietf.org/mailman/listinfo/sipping
This list is for NEW development of the application of SIP
Use sip-implementors@cs.columbia.edu for questions on current sip
Use sip@ietf.org for new developments of core SIP