On Tuesday, Mar 11, 2003, at 15:20 Europe/London, Vernon Schryver wrote:
1) There exists a PKI. In this case, the sender just uses S/MIME or
PGP
or whatever, and all the intermediaries need do *NOTHING*. This
message is
PGP signed - if you want you can validate it via the PGP
web-of-trust....
If there is a PKI, you've still got nothing. Spammers can and must
be allowed to buy certs too. Authentication is not authorization.
With authentication you've got something though - a much stronger
ability to blacklist.
Matt.
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg