Re: CAPTCHA over smtp (yet another spam solution to discuss)

2006/11/11, Brian Candler <[email protected]>:
> On Sat, Nov 11, 2006 at 03:37:25PM +0100, David Sanchez wrote:
> > >Now, this last setup is in some ways quite similar to Instant Messanger
> > >apps, except that if you want to communicate with everyone on IM then you
> > >need your own accounts on every IM system. Also, I'd have to add friend
> > >identities manually, to avoid the pop-up messages saying "XXX would like to
> > >add you to their contacts, is that OK?", i.e. Spim.
> >
> > IM spam could be more or less avoided with SPF and, at option,
> > domainkeys and per user filters.
>
> I don't see the logic. I mean, it probably differs between the
> implementation of different IM systems, but in the simple case every client
> connects to a central server [farm], and authenticates, before sending a
> message which is relayed to the other user.
>
> Therefore if I get a message saying
>
>    "User 'foo_wombat_example' wants to make you their buddy"
>
> and this message came from the server, then I'm quite happy that this person
> really *is* a user who registered as foo_wombat_example on the IM system.
>
> The question is, is this a spammer, or someone I want to talk to? Should I
> accept the buddy request or not?



Sorry, "IM" was a typo, i was talking about IM (internet mail), not IM
(instant messenging). (To the best of my knowledge domainkeys and SPF
don't apply to IM ). Sorry again for confusing terms.

BTW: a big step forward of IM  (this time Instant Messenging :-P ) is
that lists of blocked and admited. Moreover you said IM is centralized
worldwide. Maybe for private IM but not for XMPP
(http://www.xmpp.org/specs/rfc3921.html) also known as Jabber. Each
domain has its own users, it's responsible of what their users do, and
communicate with other domains via a well known protocol (see for
example [email protected] can comunicate with [email protected].
gmail.com <-> davidsm.com communication is seamless between both
domains providers via Jabber/XMPP)

But the question is, how could you enforce MSN, AOL or Yahoo! enter
the XMPP protocol?


> Regards,
>
> Brian.
>