On 2003-04-22 "Hallam-Baker, Phillip" <pbaker(_at_)verisign(_dot_)com> wrote:
Kee does have a good point, it is the reason that I cannot afford to use a
scheme like that. A single lost email could cost my company thousands. I
don't get enough traffic on my personal email address to be worth tracking.
There's no need to lose any email for a /count/ of false positives.
Send a challenge message, but deliver the email as if no challenge
system was in place.
If you are going to run a test, I would like to test a lot of systems,
not just challenge response. For example, recording whether the
incomming email uses pipelining, whether the rDNS is "correct",
whether the IP is listed on blacklist(s), whether the envelope
from is valid, and pretty much any other data that you can think
to collect. Again, you don't actually /block/ the email if it
fails one of these tests, just record the results of what would have
happened had that system been in place.
Scott Nelson <scott(_at_)spamwolf(_dot_)com>
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg