ietf-asrg
[Top] [All Lists]

Re: [Asrg] Usefulness of wholesale blocking of attachments for SMTP?

2004-04-20 15:11:00
"Chris Lewis" <clewis(_at_)nortelnetworks(_dot_)com> wrote:
No.  DCC doesn't work like you think it does.

  I will admit I have little idea how DCC works.  My opinion of the
events is based on the message posted to ASRG by Hadmut:

http://www1.ietf.org/mail-archive/working-groups/asrg/current/msg04365.html

One-to-one email isn't going to trip DCC, and unlikely to trip Bayes.

  Maybe it won't trip DCC, but individuals appear to be free to submit
non-spam messages they dislike to DCC.  This makes it more likely that
others will end up blocking similar messages, due to one individuals
desire to censor.

Even if you're the supplier (in a corporate sense) where the spam 
meister may have a different viewpoint of what spam _is_, relative to 
say, the CEO.  I don't think maundering ( ;-) on about that sort of 
thing is useful for ASRG.  ASRG should be more concerned with making 
sure that once the user of the filter has decided to _use_ a given 
technology that he actually gets what the supplier provides, and is 
given enough information to make reasonable choices.

  I agree.  When we design systems, we *know* they're going to be
arbitrary and capricious.  So the solution isn't to ban that behavior.
The solution is to make users of the system accountable.  This limits
the negative impact of the political-layer flaws.

  My focus, therefore, has been on systems which enable people to
claim accountability, and to be verified to be accountable by others.

As long as the DNSBL user is adequately informed, it ain't any of our 
business how capriciously the DNSBL is operated.  Truth in advertising 
is the key.  Not bans against capriciousness.

  Exactly.  Look at cbl.abuseat.org.  There's *no* information as to
how an IP gets listed, other than "trust us".  It's arbitrary and
capricous, but immediately responsive to complaints (as the designers
obviously understand these issues.)

  So my concern with content filtering systems is that unless it's
possible to tell *who* submitted some data, users of the system end up
using rules for which no one is accountable.  That can be an avenue
for abuse.

  Alan DeKok.

_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg