spf-discuss
[Top] [All Lists]

Re: Attacking the throwaway-domain problem

2003-10-14 15:07:25
On Tue, Oct 14, 2003 at 05:45:49PM -0400, Eric S. Raymond wrote:
Erik Corry <erik(_at_)arbat(_dot_)com>:
On Tue, Oct 14, 2003 at 05:20:34PM -0400, Eric S. Raymond wrote:

So the question is, what *other* data might registrars publish to
facilitate identifying domains that are probably throwaways?

Name of person/company registering? 
Name on credit card?
MD5sum of credit card number?

All too easy to game against by forming shell companies

Takes a certain amount of time, money and effort in most
jurisdictions, and can perhaps be connected back to the
person involved?

or hiring proxies.
Remember these are *throwaway* domains.

Any system that relies on reputation can be 'gamed' by people who
are willing to sell their reputation.  But in the end, each person
only has one reputation to sell.

If this is a real problem then you need to move beyond reputation-
based systems to some sort of sender-pays or sender-posts-bond
system.  There are proposals out there.

Name of registry.

Not sure how that would help.

You snipped the bit where I explained it.

-- 
Erik Corry erik(_at_)arbat(_dot_)com
A: Because it messes up the order in which people normally read text.
Q: Why is top-replying such a bad thing?
A: Top-replying.
Q: What is the most annoying thing in email?

-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡