Re: Operations requirement: no hop-by-hop

On Mon, Feb 16, 2004 at 03:47:15PM +0200, Alan Barrett wrote:
> 
> On Sun, 15 Feb 2004, Paul Hoffman / IMC wrote:
> > If your requirement is that there be full authentication before 
> > communication, fine. My requirement is that I can communicate with 
> > people who I cannot authenticate ahead of time.
> 
> I do not want to to receive unauthorised messages.
> I want the ability to authorise reception of unauthenticated messages.


And I want to have the choice. :-)

For example, I'd like to limit the message size for messages
without authentication/digital signature/other mechanisms like RMX.

And I'd like to limit it to, e.g. 10 messages per day.

Or to paraphrase it: 

There is no "yes" or "no". It's a matter of policy.

Every sender should be free to contact any receiver, to
authenticate or not, and to announce a message of size X and
content Y. And the receiver must be free to answer "you're
welcome", "no thanks", "get off/get lost", "authenticate
yourself!"  depending on the local policy.

It's a matter of negotiation between sender and receiver
which includes authentication, message size,... and which
results in to transfer or to not transfer.

regards
Hadmut