ietf-asrg
[Top] [All Lists]

Re: [Asrg] Rough consensus on pay to delist

2011-02-27 16:34:57
Dear John,

You wrote:
  
I'm seeing no support at all for "Claus'" contention that we should
change the language about pay to delist in DNSBL practices draft.

The point which I see is not just the argumentation contra DNSBLs
that offer an optional paid expedited express delisting,
my point was also the argumentation pro commercial DNSBLs
without showing that there exists a conflict of interests also.

So if 2.2.5 Conflict of intersts is not completeley removed,
then it should also not claim that it would be generally considered 
apropriate to charge for a DNSBL, without mentioning the potential 
conflict where a possibly important customer of the commercial 
DNSBL is also willfully hosting spammers. 

Logic says that chances are much higher that a DNSBL-Operator
might be blind to the spam coming from his customers ranges
or that he might at maximum list some actually not used ranges 
as "Alibi-Listings" because a commercial DNSBL is a business
that wants to make profit.
If the commercial DNSBL-Operator would cheat here, this would 
be hard to proof, because he can always claim, that he didn't 
receive any spam from a spammy IP.

Different to that it is unlike that a DNSBL-Operator of a free DNSBL
that has an express delisting option will list innocent IP's, because 
he would risk to get exposed by the ISP in cases where he would list
IP's that did clearly not send any spam.
The ISP of any listee might have additional logs that could clearly proof
if the DNSBL-Operator would be cheating in that situation.

So the complete passage 2.2.5 is (sorry for the wording) pure paranoid
kookoil.

In fact it is *ALWAYS* a question if the DNSBL-Operator is honest or not.
But this is a question which the DNSBL-Users has to ask himself while
reading the DNSBL-Policies.

Assuming any DNSBL-Operator could run a blocklist in bad faith is 
something that should not be in any DRAFT nor in any RFC IMHO.

Therefore the complete passage 2.2.5 should be removed IMHO:

Claus von Wolfhausen
Technical Director
UCEPROTECT-Network
http://www.uceprotect.net

 
  
_______________________________________________
Asrg mailing list
Asrg(_at_)irtf(_dot_)org
http://www.irtf.org/mailman/listinfo/asrg