On Thu, 9 Oct 2003, Mr. Ned wrote:
My proposal doesn't have these problems. Would you please look at this, and
tell me how you feel it compares with SPF?
http://nedharvey.com/stopspam/proposalVSMTP.php
A quick look:
"The sender uses his/her username and password to login"
First of all, with all the free email out there, who would need to
adpot this, it just becomes another race again. Second, PC security
sucks. Some people believe most spam already comes from hacked/infected
machines, and the current dictionary attacks we receive seem to support
that theory, since they never connect to me more then once in a spamrun.
If they can hack/infect the machine, they can either 1) create new accounts
at free isps or 2) steal the user's identity, or 3) asks lots of LUMID's.
And now a re-install of his pc wont even help, the identity will be put
on blacklists and this person has to get a new email address.
fighting spam by relying on user's ability to keep their password/token
secret is a lost race.
Paul
-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡