Re: [Asrg] Spam Salt, an email sender authentication mechanism
2010-09-28 03:57:57
It's some sort of message signing schema.
As there are other quite good signing schemas around us, a discussion could be
around comparing schemas. E.g., how do you place SpamSalt WRT DKIM ? What's the
differences ? Why SpamSalt could be better or worse than DKIM ?
JM
Kai Engert wrote:
Dear members of the ASRG mailing list,
I'd like to present you my anti-spam idea which I call Spam Salt.
Abstract:
The idea is to assign an additional secret key (salt) to each email user
account. The email sender uses the salt and the message contents to
calculate a hash value and adds that hash value as a new email header.
For each email domain a verification server is registered in the DNS
that can be contacted to verify the authenticity of messages that
contain a hash value in the email headers. An email recipient can
contact a verification server and filter incoming messages based on the
verification response. As soon as multiple email recipients report that
a sender is sending spam, the sender's salt gets changed, and future
verification requests for messages that used the older salt will fail
and such messages can be rated as Spam.
I'd like to invite you to read the detailed description of this idea,
available at
http://kuix.de/spamsalt/
I'm looking forward to your feedback.
Thanks a lot in advance.
Regards,
Kai
_______________________________________________
Asrg mailing list
Asrg(_at_)irtf(_dot_)org
http://www.irtf.org/mailman/listinfo/asrg
--
---------------------------------------------------------------
Jose Marcio MARTINS DA CRUZ http://j-chkmail.ensmp.fr
Ecole des Mines de Paris
60, bd Saint Michel 75272 - PARIS CEDEX 06
mailto:Jose-Marcio(_dot_)Martins(_at_)mines-paristech(_dot_)fr
_______________________________________________
Asrg mailing list
Asrg(_at_)irtf(_dot_)org
http://www.irtf.org/mailman/listinfo/asrg
<Prev in Thread] |
Current Thread |
[Next in Thread>
|
- Re: [Asrg] Spam Salt, an email sender authentication mechanism, (continued)
Re: [Asrg] Spam Salt, an email sender authentication mechanism, der Mouse
- Re: [Asrg] Spam Salt, an email sender authentication mechanism, Kai Engert
- Re: [Asrg] Spam Salt, an email sender authentication mechanism, Ian Eiloart
- Re: [Asrg] Spam Salt, an email sender authentication mechanism, mathew
- Re: [Asrg] Spam Salt, an email sender authentication mechanism, der Mouse
- Re: [Asrg] Spam Salt, an email sender authentication mechanism, Kai Engert
- Re: [Asrg] Spam Salt, an email sender authentication mechanism, der Mouse
Re: [Asrg] Spam Salt, an email sender authentication mechanism,
Jose-Marcio Martins da Cruz <=
Re: [Asrg] Spam Salt, an email sender authentication mechanism, Steve Atkins
Re: [Asrg] well known techniques, was Spam Salt, John Levine
|
|
|