Re: How is XMPP better than SMTP for spam prevention?

Torsten Bronger wrote:
> Hallöchen!
> 
> Lastwebpage writes:
> 
>> Hello
>> I notice another point, where I see no solution, and I must admit, I
>> have no good ideas too, but its similiar to email spam. After spend some
>> thoughts I think this is the main point of all spam problems.
>>
>> What about the JID creation?
>> When I would be a spammer, I would create a account on jabber.org.
>> After I get the JID I would start my program which connect to different
>> servers, search for users in MUCs or use the user directories and hope
>> that enough people buy my little blue pills.
>>
>> After some hours I notice that some servers starts to block my
>> spam-messages. oooohhhh, okay, visit jabber.org again to get a new JID
>> cost 10 seconds... :p
> 
> This is what Peter Saint-Andre meant with
> 
>>>> (or, for instance, tighten up or turn off in-band registration,
>>>> which is user-friendly but also makes it possible to create lots
>>>> of accounts at multiple servers).
> 
> I'd love to keep this feature, though.

That's why we're defining CAPTCHA forms (which can be used for in-band 
registration, joining a groupchat rooms, etc.):

http://www.xmpp.org/extensions/xep-0158.html

Not that CAPTCHAs are a perfect technology either! But if we truly 
started to experience the kinds of attacks you're talking about, we 
would also combine tighter in-band registration with things like IP 
blocking (as well as existing tools like rate limiting).

Remember, perfection is not an option. :)

Peter

_______________________________________________
This is JUser -- a mailing list for end users of Jabber clients.

Don't like email? Try the forum:
http://www.jabberforum.org/forumdisplay.php?f=21

To unsubscribe, send email to 
[email protected]
or go to the following web 
page, scroll all the way down, 
and type in your email address:

http://mail.jabber.org/mailman/listinfo/juser
_______________________________________________