Re: static versus dynamic nature of DNS: rate limiting

On 2004-02-22, at 20.33, Yakov Shafranovich wrote:

> The only compelling argument that I
> have heard to date is that users will care more about their domain 
> names
> or email addresses being hijacked than IP addresses.

It is a bit more complicated than this:

- A receiving MTA can reject (5xx errors in SMTP) mail which comes from 
a peer which is not approved by the domain the mail comes from 
(envelope from)

- Given a mail is coming from a peer which the domain owner the mail 
comes from approves, there are legal and policing mechanisms which can 
take over -- as well as "more normal" technical tracing down a host 
which have viruses/trojans installed

Given it is so easy to deploy things like these, I think we definitely 
should.

     paf