[Subject changed as per posting guidelines, was "Re: Forgery in SMTP
(was [Asrg] [1] Why SPAM is worse in SMTP than in other protocols)". Mod.]
Walter Dnes wrote:
On Wed, Dec 24, 2003 at 03:34:56PM -0500, Alan DeKok wrote
A spammer sends out a viagra spam "From: "Alan DeKok"
<*****(_at_)ox(_dot_)org>".
How are the 20 million strangers it's addressed to going to *REJECT* it?
At these volumes, merely accepting the email and storing it in
recipients' "spam folders" will cause smaller ISPs to run out of
mailspool space. What actions can *YOU* take that would allow
verification/authentication of the "From:" during the SMTP transaction ?
This is where something like DK comes in. As it is now, we have two sets
of proposals - one addressing the SMTP envelope (LMAP), and the second,
like DK and various PKI schemes (Lumos, TEOS, etc.) address the actual
body of the message. Both can be complementary to each other.
Yakov
-------
Yakov Shafranovich / asrg <at> shaftek.org
SolidMatrix Technologies, Inc. / research <at> solidmatrix.com
"I ate your Web page. / Forgive me. It was juicy / And tart on my
tongue." (MIT's 404 Message)
-------
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg