ietf-asrg
[Top] [All Lists]

Re: [Asrg] 7. BCP - Abuse Reporting standard

2004-01-06 19:06:17
Jon Kyme wrote:

On NANAE, there's a group working on a "standard spam reporting" format
(see http://www.tmisnet.com/~strads/spam/bcp.html )

Yakov Shafranovich wrote:
>
Something that focuses solely on reporting spam messages themselves can be easily done with some kind of DSN-like format. BUT, if you want to report IPs, URLs, domains, and even perhaps include trace information on the spammer's companies, that is something much bigger, and requires different players.


I don't see a massive problem with coming up with sub-types (or
sub-sections?) of a spam-response DSN-like message which would cover the
types of report you identify.


We need to draw a balance between the time required to define and implement such standard, and what it would cover. The larger the standard, the more time it will take to do it. Therefore, I would rather see something with a more narrow focus, and possibly extensible, rather than something broad that will take forever to implement.

The cited document suggests that reports may be sent to the "designated
reporting address" for:
     1.  The point of origin (determined from the headers)
     2.  Email drop boxes (if implicated)
     3.  Web sites (if implicated)
     4.  Regulatory authorities (if available)
     5.  Spam tracking services / block lists (if desired)
     6.  Online repositories
     7.  Other implicated parties (trademark protection)

For example, regulatory authorities such as the FTC might be interested in information that a regular ISP will not care for. The problem that I see is determining what the standard should cover, and the parties involved, making sure that its narrow enough to be implemented quickly and broad enough to make a difference while keeping all of the involved parties happy and benefiting from it.

Yakov
-------
Yakov Shafranovich / asrg <at> shaftek.org
SolidMatrix Technologies, Inc. / research <at> solidmatrix.com
"Power tends to corrupt, and absolute power corrupts absolutely" (Lord Acton)
-------


_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg