Re: Virus authors produce open spam relays (long digression on

Jeff Silverman <[email protected]> wrote:
>     I want to send an E-mail message with sender verification.  So I 
> verify myself.  Then somebody breaks into my computer and sends a bunch 
> of spam, using my sender verification.  The spam appears to come from me!

  The short answer is read the LMAP discussion document.  Sender
verification is not about stopping spam.  It's about sender
accountability.  IP's are more short-lived than domains
(e.g. dial-up), so tying spam to your domain (rather than IP) makes
it easier to hold you accountable.

  Put another way: It's not *my* problem that *your* computer was
broken into.  If someone is sending spam from your computer, that's
more *your* problem than mine.  You should fix it, and you should be
held at least partially responsible.

> Our goal is to return control of E-mail in-boxes to the clients of
> those in-boxes.  It is not a free speech issue.  It is a "we have
> this asset that we own, and we want to control it" issue.

  Exactly.

  Alan DeKok.