ietf-822
[Top] [All Lists]

Re: RHijacked Addresses

2002-08-01 05:39:27

On Wed, 31 Jul 2002 17:49:17 +0200, you wrote:

This message, which I got recently, shows how some people
react to what is happening around us. What is our responsibilities
as standards developers for allowing this to happen?

Waiting for IPv6 and personal home mail servers which accept eMail
only from trusted other IPv6 servers.


At 00:01 -0700 02-07-31, Adventive Editor wrote:

I own a well traveled web site. Over the course of the last few
months, someone has been sending virus laden emails using our email
address. They have even gone so far as to create aliases that are
not ours. The problem is neither our computers, not the mail server.

My mail-contact addresses which are visible on my websites are also
flooded with viruses - and these addresses are used to spam the world.
Some spammers are even attaching _my_ _webpages_ to their spam/trojans
- and they are using my mail-address to fool the users.


The advertising industry uses billions of dollars to find customers
and spam them with all type of media. We have _no_ chance against
them.


As a software developer I'm meanwhile thinking about automatic
"eMail-Handshake" to make sure that a sender is "authorized" to send
me eMail - and rejected already on eMail server level. This requires a
database of "permitted" senders on the receiving SMTP server. 

But because OE users are not even ready to use the integrated security
features but insist on "quick view and execute" features we have no
chance over all.

A first approach might be to introduce a "general mail reader
function" called:   "Reject such Spam" - which retransmits a message
to the mailer. But the design for such a beast is hard - and
ungraceful due to malfunctions.


I am afraid that seperating "private and public identities" is the
only solution in the long run. (And it is also cheap :-)


-- 
Juergen
------------
www.yenc.org


<Prev in Thread] Current Thread [Next in Thread>