ietf-asrg
[Top] [All Lists]

Re: [Asrg] A method to eliminate spam

2003-03-17 21:24:07
On Mon, 17 Mar 2003 20:12:22 EST, Kee Hinckley said:

A .com cert goes for $99 semi-wholesale.  QuickCerts are even 
cheaper.  That would be a per-year cost.  Not too bad.

And how much do said certs prove?  What verification does QuickCert do to
make sure that they're issuing a cert to an actually identified user?

At $100 a pop, what's stopping spammers and other miscreants from getting
bogus certs?

As for the encryption hit.  A lot of sites are already using TLS and 
self-signed certs.  I use it for the hundreds of messages I 
download/send every day, and other sites that support it use it 
connecting to my server.  Not a huge cost.

As I said, it's not a hit when you're doing several hundred pieces of mail
a day.  You do several hundred thousand, you'll be wanting an SSL card.. ;)

(And yes, I have a listserv box that cranks about 500K msgs/day, and it will
do SSL with a self-signed cert if the other end says STARTTLS.  Not many
sites do.)

Attachment: pgpXc48hrCwzI.pgp
Description: PGP signature