ietf-asrg
[Top] [All Lists]

Re: [Asrg] 6 - Yahoo Domain Keys

2004-05-19 21:47:39
----- Original Message ----- 
From: "Barry Shein" <bzs(_at_)world(_dot_)std(_dot_)com>
To: "George Ou" <george_ou(_at_)netzero(_dot_)com>
Cc: "Barry Shein" <bzs(_at_)world(_dot_)std(_dot_)com>; "Chris" 
<asrg(_at_)rebel(_dot_)com(_dot_)au>; "Yakov
Shafranovich" <research(_at_)solidmatrix(_dot_)com>; "ASRG" 
<asrg(_at_)ietf(_dot_)org>
Sent: Wednesday, May 19, 2004 6:01 PM
Subject: Re: [Asrg] 6 - Yahoo Domain Keys


On May 19, 2004 at 16:29 george_ou(_at_)netzero(_dot_)com (George Ou) wrote:
 > But they only get to spew spam from fxbrezd.com once with their brand
 > spanking new SPF/CallerID/Domain Key for a few days.  Once it becomes
clear
 > that fxbrezd.com is a spammer, then you permanently blacklist that
entire
 > domain and announce it to the entire world so that no one else will
ever
 > receive mail from fxbrezd.com again.  Yes, they can still register
1000s of
 > domains, but its a bit more difficult.  From that point on, the
registrars
 > need to be pressured to track these people down and the law needs to
 > severely penalize them.  Additionally, at least you won't be receiving
junk
 > from the hundreds of thousands of zombies out there.

The optimism is touching, particularly the part about "the law needs
to severely penalize them". That's a big hole you're filling in with a
worldview that unfortunately hasn't had much credence thus far.

-- 
        -Barry Shein

I realize that my optimism may be misguided, and the more I look into these
things the more jaded I become like yourself.  However, should we not try at
all?  Right now, the government makes laws that have little or no use in the
fight against spam.  If we force the spammer to at least make bulk purchases
of Domain names, rather than using anonymous zombies with impunity, there is
a much better chance we can track down who is doing the spamming and try to
make some partially effective laws.  I'm sure any of these anti-spam
measures have counter measures, but does that mean we don't even try?
Having a reliable domain authentication system in SMTP that is widely used
may not be the solution, but at least a step in the right direction.

George


_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg



<Prev in Thread] Current Thread [Next in Thread>