ietf-asrg
[Top] [All Lists]

Re: [Asrg] Re: 3b. SMTP Verification - Reputation Systems and their Problems (Modified by Anne P. Mitchell, Esq.)

2004-03-08 09:45:20
"Anne P. Mitchell, Esq." <amitchell(_at_)isipp(_dot_)com> wrote:
That is not what an accreditation system (necessarily) is, and it's not 
what IADB is.  IADB is very specifically _not_ a whitelist (nor a 
blocklist) - it is, if you will, a colour-neutral list, whicih provides 
you with very specific datapoints. 

  From reading your web pages about how it works, I disagree.  You
have a particular agenda, and your "accreditation" system is designed
to enforce that agenda.

  This is not to say the agenda is bad, but it's not neutral.

  If you wanted your list to be neutral, you would also list spammers.
If they claim to send large volumes of spam, and they can be verified
to do so, then they should be listed on a "colour-neutral" list.  You
won't list spammers, so your service isn't neutral.

  The point is not to stop spammers by publishing accreditation
information for non-spammers.  That just won't work.  The point is to
enforce consistency between claims and actions, no matter what those
claims and actions are.  By instead enforcing an agenda, you bias the
service, and make it less useful for everyone.

The real world example of an accreditation is Underwriters Labs, or the 
Good Housekeeping Seal of Approval.  Or that certificate in an elevator 
saying it has been inspected on such-and-such a date.
Or a school being accredited.

  UL will accredit electronic devices that are useless, so long as
they are safe.  This is the model which has permitted them to be
consistently percieved to be unbiased.  You can by garbage with a UL
seal, and know that it may not do anything, but it won't burn down
your house.

All of these, like a listing in IADB, say "the product bearing this 
accreditation has been proven to meet a certain set of standards as 
determined by the accrediting body."

  Your standards are clear.  You are not publishing accredication, you
are attempting to enforce compliance with your agenda.  That's OK, but
it's not an accreditation service.

  Alan DeKok.

_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg



<Prev in Thread] Current Thread [Next in Thread>