Re: Feedback on Hypertext Mail Protocol (a.k.a. Stub Email)

James Craig Burley <[email protected]> 24 Feb 2006 01:24:40 -0000
Newsgroups gmane.mail.im2000
Message-ID <[email protected]>
>> ...a typical intermediate MTA,
>> employing retrieval solely (or largely) for obfuscation purposes...
>
>Note that even if the benefits of obfuscation prove to be little or 
>none, the obfuscation technique would still be useful simply as a way 
>to spite the sender, which 99% of the time is a spammer.

Yes.  There are lots of techniques like that, which seem like they
would "fight" spam or "punish" spammers, by making email exchange
artificially more expensive.

I've come to believe making email exchange artificially more expensive
or less reliable -- especially structurally -- is not the right
direction for the industry, or, at least, not a direction in which I
personally have much interest.

(Note that you can "spite" a sender in SMTP by temporarily rejecting
each and every delivery after the DATA phase, and by also having lots
of spamtraps.)

>For most legitimate email senders, even if the amount of bandwith they 
>use for sending emails increases tenfold, it would still be much much 
>less than the amount of bandwith they use for other purposes, e.g. web 
>browsing, audio, video, games, graphics, etc. Perhaps this is not as 
>much the case in 3rd world countries yet, but in 2nd world countries I 
>think it is already the case (not to mention 1st world), and I don't 
>think the 3rd world is too far behind.

There's an insight there that I think is very important, and I believe
I've already touched on it before: of those sending emails, *only*
spammers fit a particular profile, that of trying to send a very large
number of (fundamentally) identical emails to as large a potential
audience as inexpensively as possible, with little or no concern for
whether any given recipient actually sees that email.

(Group deliveries of legitimate notifications such as "you requested
monitoring of www.example.com; it was just updated" come close to that
kind of behavior, but not all *that* close.  For one thing, recipients
have presumably already signed up to receive such emails, so spamtraps
are unlikely to be among the list of recipients.)

Artificially increasing the cost of exchanging email via techniques
that are designed with that insight in mind is one way to "solve" the
spam problem.  Especially if it takes advantage, and hence does not
require substantial replacement, of SMTP, that approach has
attractions.

Another approach is to fundamentally change how email is (typically)
exchanged, such that it better favors legitimate exchanges of email
over those who fit the spammer profile shown above than today's
typical SMTP exchanges.

I believe both SMTP and IM2000 can be "adapted" in that fashion,
though neither in as an ideal a fashion as an entirely new protocol,
and not by adding all sorts of artificial barriers to exchanging email
but, rather, by *lowering* some existing ones.

>So maybe eventually all spammers will find ways to be on whitelists.

Which brings us to the zombie problem, which I believe can be "solved"
(without simply defining it away) only via an appropriately adapted
existing protocol or a properly-designed new protocol, neither of
which is particularly on-topic here.  (The idea I have is to increase
requirements for zombie, or untrusted-bulk-sender, disk space
substantially, in conjunction with the increases in bandwidth
utilization we've been discussing.)

-- 
James Craig Burley
Software Craftsperson
<http://www.jcb-sc.com>