Yakov Shafranovich <research(_at_)solidmatrix(_dot_)com> wrote:
We are seeking additional input on this document and more volunteers to
help out with it. Please post comments to the list directly or contact
us off-list.
I believe that both the inventory of problems, and the technical
considerations documents, are strongly related. Both need more focus,
and the diagrams in:
http://www.elan.net/~william/asrg-emailpathverification-presentation.pdf
are a good start.
That document needs to be expanded to talk about specific network
configurations used to deliver mail, which protocols are involved
where, and which fields of those protocols are open to what kind of
abuse. Once we have such a document, we can then proceed with
"solving the problem in diagram X, protocol Y, abuse of field Z".
Having a narrow statement of the problem scope means that any
contentious issues are minimized, as the discussion is about specific
real-world details, and not personal opinion. It also means that the
inventory of problems is relatively simple: point to the diagrams, and
the points of abuse that they contain. Many technical considerations
are likewise straightforward: changes this point of network
communication propogate throughout the rest of the diagram.
I think this post means that I'm volunteering to write that
document. I'm not sure I'm happy with taking on more work, and I'm
certainly not an SMTP or DNS expert. But having something on paper
will be useful.
Alan DeKok.
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg