ietf-asrg
[Top] [All Lists]

Re: [Asrg] 6 - Yahoo Domain Keys

2004-05-19 17:00:11
----- Original Message ----- 
From: "Barry Shein" <bzs(_at_)world(_dot_)std(_dot_)com>
To: "Chris" <asrg(_at_)rebel(_dot_)com(_dot_)au>
Cc: "Yakov Shafranovich" <research(_at_)solidmatrix(_dot_)com>; "ASRG" 
<asrg(_at_)ietf(_dot_)org>
Sent: Wednesday, May 19, 2004 3:14 PM
Subject: Re: [Asrg] 6 - Yahoo Domain Keys


As far as I can tell spammers have now become domain registries and
just generate random-appearing, generated domains like www.fxbrezd.com
(or, more often, .info or .somecountryyoudon'twanttoknowmoreabout.)
For example, these whacko domains usually have functioning MX's.

Which means they can just as easily set up SPF or Domain Key or
similar services for those randomly generated domains.

But they only get to spew spam from fxbrezd.com once with their brand
spanking new SPF/CallerID/Domain Key for a few days.  Once it becomes clear
that fxbrezd.com is a spammer, then you permanently blacklist that entire
domain and announce it to the entire world so that no one else will ever
receive mail from fxbrezd.com again.  Yes, they can still register 1000s of
domains, but its a bit more difficult.  From that point on, the registrars
need to be pressured to track these people down and the law needs to
severely penalize them.  Additionally, at least you won't be receiving junk
from the hundreds of thousands of zombies out there.


_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg