Re: [Fwd: [Asrg] Re: Documents for LMAP BOF]

On Monday 09 February 2004 05:45, Yakov Shafranovich wrote:
> What I still do not understand with reputation and accreditation
> services is why the same concept of "reject from unknown domains" cannot
> be applied to IP addresses. 

I.e. IP whitelisting?
As far as I understand, LMAP is that kind of approach. The issue is how to 
support this (distributed) list, how it is "indexed" and how lookup is 
performed.

> The same way in a LMAP world we can reject 
> email or filter it because of lack of reputation or accreditation, can
> be done with IP addresses, without a need for any protocol changes.

To own an IP address cracker has to own home PC, but owning a domain requires 
hijacking an administered host or payment/registration/etc.
Even domain whitelisting on the side of receiver will be much more desirable 
than plain ip whitelisting. (So the blacklisting.)

Are you still playing devil's advocate?

-- 

	Viktor S. Grishchenko