spf-discuss
[Top] [All Lists]

Re: Attacking the throwaway-domain problem

2003-10-14 14:53:34
Dustin Trammell <dtrammell(_at_)citadel(_dot_)com>:
So the question is, what *other* data might registrars publish to
facilitate identifying domains that are probably throwaways?

Perhaps they could publish whether or not they actually verified the ID
of a registrant and found them to be a real entity.

That seems more promising.

                                                 This has been
mentioned before on the list, and it was suggested that if compliant
MTA's started rejecting mail based on a domain not being published with
a validated registrant indicator, then more registrars would begin
verifying ID's of their customers.  The registrars would not necessarily
need to provide the information, but just display an indicator on the
whois record that the owner of the domain's ID has been verified.  You
do however end up with somewhat of a chicken and egg scenario.  The
registrars most likely won't provide this until they have to in order to
keep their customers happy, and MTA admins probably won't use this as a
factor in a decision until enough registrars make it available.

I see a larger problem.  What if the registrars worry that incorrectly
advertising a domain as verified when it is not (or vice-versa) could
open them to legal action?

Ideally, we're looking for data that doesn't require the registrar to make
a potentially actionable judgment.
-- 
                <a href="http://www.catb.org/~esr/";>Eric S. Raymond</a>

-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡