Computer automated cert blacklist creation on spam detection.
Oh, goody, anyone who dislikes me can send in a few denouncements and
get me added to blacklists. You're making one of the classic FUSSP
errors, to assume that bad guys (not all of whom are spammers) will
play by the rules.
AOL has a system fairly similar to what you're proposing built around
their spam button. Since their mail system is closed, they know the
IP from which each message was sent, and they carefully track the
complaint rates of each sending IP. Moreover, if you send them your
IP range and contact address, their scomp subsystem will send you back
the mail that people complain about. I can report that 100% of the
mail that scomp sends me is either mail from confirmed opt-in lists or
direct responses to mail that the AOL member sent. None of it is spam
by any definition other than "mail I don't want". If you're going to
blacklist on complaints, the false positive level will be ferocious.
Regards,
John Levine, johnl(_at_)taugh(_dot_)com, Taughannock Networks, Trumansburg NY
http://www.taugh.com
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg