Re: [Asrg] forwarding (was Re: actual possible improvements, was Email

J.D. Falk wrote:
> On 19/11/2008 02:10, "Alessandro Vesely" <vesely(_at_)tana(_dot_)it> wrote:
>
> > J.D. Falk wrote:
> > > For example, I suspect everyone here is familiar with the forwarding
> > > problem: forwarders or mailing lists may inadvertently forward spam, and ISP
> > > reputation systems assume the forwarding IP is a spammer.  But if the
> > > forwarder signed the message, and the ISP could do a VBR (or similar) check
> > > to confirm that the forwarder really is a member of the "forwarder" class
> > > (as determined by some sufficiently trustworthy external process), then the
> > > ISP may choose to apply a different reputation algorithm.
> > How would you compare such signing solution to an actual login? A
> > forwarder may get a password for authenticating at your server going
> > through an automated or semi-automated process much similar to the one
> > implied to enroll in the forwarder class (or to signing up for
> > feedback loops, for that matter.) SMTP AUTH can handle all SMTP cases,
> > e.g. multiple recipients. This would enable working "live", thus
> > encompassing, say, DNSBL and SPF, that would otherwise require their
> > own arrangements.
> The SMTP AUTH idea is an interesting idea, but seems to me as if it'd
> require much more effort on the part of the receiving/authorizing entity.
Yes, it is more difficult to set up, specially if we want manual 
interventions to be required in some specific circumstances only. 
However, once set, it would be very cheap to run.
> I really do like the idea, though, and I think it'd be an interesting
> research project for the ASRG to tackle.
>
> (I'm not volunteering to manage it, though.)
That idea originated from a discussion on the SPF mailing list. Some 
time after, I begun to lazily collect its pieces, writing pages like 
http://fixforwarding.org/wiki/forwarding_agreement
(I'm somewhere between "programmer" and "netizen" according to 
Vernon's list http://www.rhyolite.com/anti-spam/you-might-be.html and 
currently not a member of the ASRG, so I cannot volunteer either ;-) )
Thank you for your interest.
Ale

_______________________________________________
Asrg mailing list
Asrg(_at_)irtf(_dot_)org
https://www.irtf.org/mailman/listinfo/asrg