Hello Kai,
in the case where a web-mailbox is hacked and used to send spam to all
contacts in that mailbox, those contacts using two-way mail would get
spam, as the mechanism, proposed by you, negates the effect of
conventional anti-spam systems.
In this particular case, not-using two-way mail will lead to less
received spam.
Mailboxes get hacked, as users use one and the same password to register
everywhere in internet and often they leave their email address to all
those registrations. So the providers of such platforms (e.g. a forum)
have email address and password, which probably match.
Greetings
Dilian
On 25.02.2015 16:35, Kai Engert wrote:
Hello,
I'm not sure what's the best place to send this idea to enhance SMTP for
avoiding spam. The ASRG list is no longer active, so I'm trying it on
this list. Please suggest better places if you think it's inappropriate.
I think it might be appropriate, if there's willinglist to adopt. I
understand that many people/groups would have to agree to such an
enhancement of today's SMTP, so let's start by discussing if this
approach could work.
A (draft) writeup of this idea can be found as a PDF file at:
https://kuix.de/two-way-mail/
Very short summary below:
=================================
Email should adopt the both-way opt-in requirement used by many instant
messaging systems, before messages are accepted for delivery.
Require email address whitelists, controlled by the user, managed on the
user's mailbox server.
Find a way to signal contact attempts to the recipient, enabling a user
to discover them and add entries to the whitelist.
Change email delivery from today's store-and-forward approach and switch
to store-notify-and-poll.
Have the destination server retrieve email only if the sender address is
in the recipient's whitelist.
Have the destination server contact a mail server based on official
records (e.g. DNS), instead of accepting mail from anywhere.
=================================
Please let me know in case this is actually an old idea and has been
discussed/rejected already.
I'd appreciate your feedback.
Best Regards
Kai
_______________________________________________
ietf-smtp mailing list
ietf-smtp(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/ietf-smtp
_______________________________________________
ietf-smtp mailing list
ietf-smtp(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/ietf-smtp