Re: Email Web of Trust - some actual experience

"Alan DeKok" <[email protected]> Fri, 12 Mar 2004 14:06:58 -0500
Newsgroups gmane.ietf.asrg.smtpverify
Message-ID <[email protected]>
Yakov Shafranovich <[email protected]> wrote:
> >   If everyone says an MTA has been around for 6 months, you're pretty
> > sure that either it's not a spammer, or it's in a blacklist somewhere.
> 
> Then this would only address the issue of hijacked computers. Spam going 
> through the ISP's mail servers is not addressed by this.

  Agreed.

> Of course it does make the playing field smaller on one hand, but on
> the other hand how would new MTAs introduce themselves into the
> trust network?

  MTA's need to record, and publish such information.  When taken
together, that information tells you which MTA's are probably OK, and
which aren't.

> I am not saying that is a bad thing, but simply trying to narrow down 
> the type of spam such system would address.

  Getting rid of DUL & Blacklists would be useful.  There are many,
many, fewer IP's in any whitelist than in DUL or Blacklists.

  The main problem is that it's easy to maintain a DUL or blacklist,
and much more difficult to maintain a whitelist.

  Alan DeKok.