ietf
[Top] [All Lists]

Re: proposal for built-in spam burden & email privacy protection

2004-02-09 14:17:47
On Tue, 2004-02-10 at 02:06, Frank Solensky wrote:

On Mon, 2004-02-09 at 16:53 +1200, Franck Martin wrote:
I wonder if we could add to this list, that non digitally signed e-
mails and invalid digitally signed e-mails get held for approval.

I don't think that will scale too well when the list gets active.  And
white-listing someone once they're been approved gives the spammers a
tidy list of which sender addresses to fake.

So? They are doing it already... and it is not a whitelist, each message
posted to the list need to be signed and the signature must be valid...
only the sender with his public key can sign... posting under somebody's
fake e-mail won't do...


"Be liberal in what you accept" should apply to the IETF mail server as
well.

I would be nice that the IETF members of this list show the way by
enabling at least GPG or s/mime for digital signing of all their
messages to the list.

Don't get me wrong: encouraging people to use pgp is a good idea, but
making it a requirement before accepting it is a policy decision that
the end user should be making, not the list.

I'm not saying to reject non esig mails, but to held them for approval
by moderators... If you want your post to go through quickly, sign it...
It would be a worthwhile incentive...

Cheers


----
Franck Martin
franck(_at_)sopac(_dot_)org
SOPAC, Fiji
GPG Key fingerprint = 44A4 8AE4 392A 3B92 FDF9  D9C6 BE79 9E60 81D9 1320
"Toute connaissance est une reponse a une question" G.Bachelard

Attachment: signature.asc
Description: This is a digitally signed message part

<Prev in Thread] Current Thread [Next in Thread>