Re: static versus dynamic nature of DNS: rate limiting

Hadmut Danisch wrote:
> What do we do here? Do we want to design a mechanism for sender
> verification or do we want to teach DNS "new tricks"? Isn't that a
> task for the DNS working group? 
> 

Before getting into implementation details, we still need to figure out
why sender verification will make any difference in the world where
MyDoom computers are spewing spam. The only compelling argument that I
have heard to date is that users will care more about their domain names
or email addresses being hijacked than IP addresses. That does point to
the fact that the problem is human in nature, not technical - users not
securing computers, ISPs not caring about abuse, etc.

As for DNS vs. HTTP for authorization, the DNS groups will be more
qualified to answer the question. We have to prove why identity and 
authorization make a difference, before getting into implementation details.

Yakov

-------
Yakov Shafranovich / asrg <at> shaftek.org
SolidMatrix Technologies, Inc. / research <at> solidmatrix.com
"And this too shall come to pass"
-------