From: "Eric Dean" <eric(_at_)purespeed(_dot_)com>
Sure, I'm in...it appears we have a small BoF that'll at least document
some
of the issues with C/R as well as propose some potential standards
I'm afraid I won't be able to do much on this right now, as I have a
deadline aproaching, but after the 16th I'll be ready to go full steam on
whatever.
I propose that a new brainstorming thread be opened, then closed a week or
so later.
Each idea should be in it's own post to the thread.
during this time no replys to the Ideas in this thread should be made.
Instead, keep track of your suggestions and observations for the next stage.
Then a list and short summary of each idea should start another thread, in
which replys can be made to each item in this list.
I think this method will bring a thourough and organised discusion of the
problem, and everyone will be able to contribute to the end result.
Is this a good way to do things?
Does anyone have any other suggestions about how this should be done, or a
suggestion for the best length of time for the brainstorming thread? I think
it should close at some point so that we can progress to the discussion
stage.
John Fenley
> -----Original Message-----
> From: asrg-admin(_at_)ietf(_dot_)org
[mailto:asrg-admin(_at_)ietf(_dot_)org]On Behalf Of Paul
> Judge
> Sent: Saturday, May 10, 2003 10:06 AM
> To: John Fenley; asrg(_at_)ietf(_dot_)org
> Subject: [Asrg] Seeking volunteers for C/R documents (was: Washington
> Post: Earthlink to Deploy a Challenge-Response System for )
>
>
>
> Yes, a BCP for designing and deploying C/R systems would be useful.
> Additionally, a proposal for a C/R protocol would be useful. This would
> permit interaction between different C/R systems and allow
> integration into
> MTAs and MUAs.
>
> Does anyone have a set of thoughts in either of these two directions
that
> they would like to put together and move forward?
>
>
> > -----Original Message-----
> > From: John Fenley [mailto:pontifier(_at_)hotmail(_dot_)com]
> > Sent: Friday, May 09, 2003 12:16 PM
> > To: asrg(_at_)ietf(_dot_)org
> > Subject: Re: [Asrg] Washington Post: Earthlink to Deploy a
> > Challenge-Response System for
> >
> >
> > Someone mentioned writing some guidelines for responsible
> > Challenge/Response
> > systems. Any chance we could officially ask Earthlink to hold
> > off deployment
> > for a month so we can get something together to guide them?
> >
> > Perhaps even a list of fatal flaws and suggested best
> > practices would help.
> >
> > These are my suggestions for a beginning list of problems:
> > 1. Avoid infinite loops.
> > 2. Allow all Opt-in mail.
> > 3. take steps to prevent spammer evolution.
> > 4. Provide proof that the challenge is legitimate.
> > 5. Avoid simple reply style challenges that are easy to
> > autorespond to. 6. Use generous auto whitelisting. 7. support
> > all types of identity proofs including new ones. 8. Don't
> > just delete everything that doesn't respond correctly, perhaps
> > reward correct challenges by placing them at the top of the inbox.
> >
> > John Fenley
> >
> > _________________________________________________________________
> > Help STOP SPAM with the new MSN 8 and get 2 months FREE*
> > http://join.msn.com/?page=features/junkmail
> >
> > _______________________________________________
> > Asrg mailing list
> > Asrg(_at_)ietf(_dot_)org
> > https://www1.ietf.org/mailman/listinfo/asrg
> >
> _______________________________________________
> Asrg mailing list
> Asrg(_at_)ietf(_dot_)org
> https://www1.ietf.org/mailman/listinfo/asrg
>
_________________________________________________________________
STOP MORE SPAM with the new MSN 8 and get 2 months FREE*
http://join.msn.com/?page=features/junkmail
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg