Re: Spam sent from compromised (web)hosts vs botnet spam

I'm thinking in a more research-y way (and maybe this has been done):

1. What's the list of authorization and authentication tokens
available in the e-mail ecology?

   A) Envelope
   B) Header
   C) Body (e.g., PGP techniques)
   D) Out of band (for lack of a better term, but such as doing
      a getpeername() on the socket SMTP'ing with you, checking
      an embedded body URL, geoDNS, etc.)

2. How can each of those potentially affect spam et al?

3. What are the mechanisms available to utilize these tokens (SMTP
conversation, DNS channel, etc)?

4. What are the relative costs in various terms (processing, $$$, etc.)

Mapping out those permutations might yield something or at least put
various ideas into one bigger picture. Could even result in the
world's first Dewey Decimal System for FUSSPs!!! "Oh that's just
17.9a.4 all over again".


-- 
        -Barry Shein

The World              | [email protected]           | http://www.TheWorld.com
Purveyors to the Trade | Voice: 800-THE-WRLD        | Dial-Up: US, PR, Canada
Software Tool & Die    | Public Access Internet     | SINCE 1989     *oo*
-
This is the asrg mailing list.  To change your subscription settings, see
http://lists.services.net/cgi-bin/mj_wwwusr/domain=lists.gurus.org