ietf-asrg
[Top] [All Lists]

Re: [Asrg] New take on emerging idea. (yet another C-R system?)

2003-04-07 18:02:17
John Constantinescu <pontifier(_at_)hotmail(_dot_)com> wrote:
> The minor change which I proposed shifts the burden of challenge
> formation from the server to the user. the challenge has become not
> just a challenge, but a first return COMMUNICATION from the user. And
> anyone seeking COMMUNICATION with the user will have no problem
> responding to the challenge.

> I guess the other major problem with Challenge-Response systems is
> handling lists(not sending challenges to them, yet not blocking them
> either), but I think I have that solved as well. I will update the
> plan as soon as I am sure.  www.pontifier.com -John

You need to look at TMDA more -- it covers, addresses, and exceeds these
areas.
J C Lawrence

I had never heard of TMDA brefore, but I can tell you now why it will not work, and mine will:

TMDA (Tagged Message Delivery Agent) seems not to address 3 main advantages of my system. 1. The confirmation messages are auto generated. (versus user created in my system) A thousand different types of user generated tests would be *almost* impossible for a spammer to create an automated response to. the sample test I got from the TMDA site could be circumvented with just a simple automated reply. 2. TMDA is a program, not a philosophy (like mine is), and thus has limited potential to achieve the near 100% penetration into varios systems(hotmail, yahoo, aol, etc)needed to SOLVE the problem.

3. This seems like a complex system, not very usable for a new internet user. wheras my system would be easy for a new internet user to understand. (www.pontifier.com/example2.html)

As for the mailing list deal. here is what I had alredy writen when I saw the TMDA site. it is similar, yet less complex, and possibly just as effective as the Dated Address system they employ:

At the service provider when I want to add a mailing list, I use a slightly different address(auto generated giberish, or a number added to my main address), that will only be used for that mailing list. the address is fully functional(can send and recieve), but is protected by only content based filters, that look at from, to, cc, and subject lines to create a content based filter for that list (if wanted).

If I want to stop recieving the list I just cancel the new address at the provider. this is painless if I only use this new address for this list, and still prevents people from EVER seing their blocked email.( see bf skinner)

It has the added advantage of sorting many lists from each other.

I realy think I have the solution. does anyone know of a system that works like mine does?: user customizable challenges, philosophicaly grounded(could be applied cross platform, webmail, etc), easy for a newbie, no Spam box, and can handle mailing lists.



_________________________________________________________________
Help STOP SPAM with the new MSN 8 and get 2 months FREE* http://join.msn.com/?page=features/junkmail

_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg