ietf-asrg
[Top] [All Lists]

Re: [Asrg] Random thought

2003-03-12 11:26:01
From: Jason Hihn <jhihn(_at_)paytimepayroll(_dot_)com>

What if we assigned a bucket in the email address?

joe[spam](_at_)paytimepayroll(_dot_)com
...

How does that differ from what many people have been doing that for
many years using the sendmail '+' mechanism?  The sendmail mechanism
is not a silver bullet.  I prefer to invent a new alias every time I
need to give an address to a vendor or other untrusted party.  It is
more work than the sendmail '+' mechanism, but is less easily "stripped."


Two more random throughts or rants:

Consider the RBL+, SPEWS, and SBL as models for how popular a favorite
spam defense might be after several years.  All of those are said to
have significant good effects immediately and if everyoone used any
one of them, the spam problem would be solved overnight.  They don't
require mail senders or other mail recipients to do anything.  All of
them are trivial to install.  SPEWS and the SBL are entirely free
other than quite modest per mail message bandwidth and other costs.
The monetary costs of the RBL+ are less than many proposed alternatives.
The RBL and SBL are said to have very low false positive rates.  They
are all reported to be at least 20% and according to some more than
70% effective (spam rejected divided by total spam).  In summary,
all three are exemplars of what many spam defenses would like to be.

The rub is that they've been around for years and have not been adopted
by even 50% of the Internet.  Depending on whose estimates you believe,
they're in use for between 10% and 45% of all mailboxes.

If your favorite spam solution depends on 70% of the net using it before
it is as effective as those systems, why will it do better than the
RBL+, SPEWS, or the SBL and how will it ever reach that critical mass?

I think such potential barriers are simply too high.  If a defense
depends on at least X% of the net using it to reduce your spam load
by X% for any X greater than 0.01%, then it is hopeless.  You will
not use it unless you invented it or are selling it and it will never
be adopted by X% of the net.

  ....

If you accept that potential barrier argument, is there any hope in
any mechanism that involves communicating consent?

  ....

Which is the rant, the statement that "If we switch to using my special
variety of unicorns for mail transport, the spam problem will be ended
because the unicorns will use their horns against spammers" or the
question "How will we breed enough enough unicorns?"


Vernon Schryver    vjs(_at_)rhyolite(_dot_)com
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg



<Prev in Thread] Current Thread [Next in Thread>