Vernon Schryver <vjs(_at_)calcite(_dot_)rhyolite(_dot_)com> wrote:
For example, how do you distinguish "never existed" from "terminated
for spamming"? Do you consider both cases to be "forged?" I hope
not.
To get back to the charter, this is an issue of consent. Leaving
aside the question of how much of what kind of spam exists, having a
consent trail which can be validated helps enormously.
For that reason, I'm not as worried about spam from throw-away
accounts, as I am about spam from open relays, or willing accomplices
hosting the spamming MTA. I believe that the two kinds of UBE are
fundamentally different, and that the methods used to deal with them
should also be different.
It's also worth quantifying the total from which that or any "vast
majority" is drawn. For example, conclusions based on 5000 messages
sent toward a handful addresses should convince no one of much of
anything.
At the minimum, they're a known outlier, and a line drawn in the
sand. They serve to give insight into the statistical distributions
in a way that the average cases cannot.
Alan DeKok.
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg