ietf
[Top] [All Lists]

Re: Sufficient email authentication requirements for IPv6

2013-04-09 14:20:44

On Apr 9, 2013, at 11:28 AM, SM <sm(_at_)resistor(_dot_)net> wrote:

Hi Keith,
At 09:56 09-04-2013, Keith Moore wrote:
You have it backwards.  Internet email has long been under DDoS attack from 
email address reputation services.

Quoting Nathaniel Borenstein  [1]:

 "One man's blacklist is another's denial-of-service attack."

Email reputation services have a bad reputation.  In some respect it is 
similar to the email delivery problem where the smaller set of good people 
are negatively affected because of the larger set of "bad" people.

Regards,
-sm

P.S. You are the only participant who has been able to override the existing 
consensus during a Last Call. :-)

1. http://www.ietf.org/mail-archive/web/ietf/current/msg29826.html 

Dear SM,

In full agreement with Nathaniel.  Avoiding unfair collateral blocking is why 
source domain authentication, not authorization, is vital.

Regards,
Douglas Otis


<Prev in Thread] Current Thread [Next in Thread>