Re: [Sipping] comments on draft-wing-sipping-spam-score-00

In the past we had the idea to provide the authentication part for the 
Spam score using SAML. That helps if you are verifying more than one 
Spam score and also a Spam score that was generated by a node more than 
one hop away.

Do you think we should re-visit some of that work again?

Ciao
Hannes

Jonathan Rosenberg wrote:
> I think a key part of this is that you need to have a trust 
> relationship with the sender of the score, otherwise its useless. As 
> with any trust relationship, it requires authentication to make sure 
> the guy you are talking to is the one you trust. This typically 
> implies mutual TLS authentication between domains. It also means that 
> you can't have more than one spam score at a time - just the one from 
> the previous hop domain. So how would you authenticate and authorize 
> the sources farther away, as this draft proposes?
>
> It seems that, unless there is a standardized range and meaning of 
> values it will be hard to take any action based on this value.
>
> It would be good to give some examples of how an originating domain 
> might compute the score.
>
> -Jonathan R.

_______________________________________________
Sipping mailing list  https://www1.ietf.org/mailman/listinfo/sipping
This list is for NEW development of the application of SIP
Use sip-implementors@cs.columbia.edu for questions on current sip
Use sip@ietf.org for new developments of core SIP