spf-discuss
[Top] [All Lists]

RE: SPF + Challenge/Response

2004-01-13 07:08:06
Maybe I'll have to try another product, such as SpamAssassin.  I've been
trying an outsourced service (MailWise) and there a fair number of false
positives.  Because of that, I have to review EVERY email for my company
(not just myself anymore) to check for valid email.  I hate it.  I'll
probably terminate the evaluation early!  I have approaced them about SPF,
and we'll see if they consider it, but I was thinking that a C/R addition to
the system would eliminate my having to review the spam-identified list.  I
think that the future will be SPF+domain 'blacklisting', but until then....

Marc

-----Original Message-----
From: wayne [mailto:wayne(_at_)midwestcs(_dot_)com]
Sent: Tuesday, January 13, 2004 9:02 AM
To: spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
Subject: Re: [spf-discuss] SPF + Challenge/Response


In <5B734AC36BC9714EB88451E6E2F043B1046EA2(_at_)alaia01(_dot_)alaia(_dot_)net> 
Marc Alaia
<marc(_at_)alaia(_dot_)net> writes:

In a world where SPF is normal, would it be unreasonable to challenge
email
identified as spam (by a spam utility)?

My two objections to C/R systems are that they often send challenges
to people who had their email address forged and that they require
real people to jump through a hoop.

If, as you said, SPF has cleared the email address, then my first
objection has been solved.

If, as you said, a (good) spam filter to only send challenges to
spammy messages, then my second objection has been solved.

So, a C/R system that did both would be fine with me.


That said, I still don't have high hopes for C/R systems to be of any
use.  Good spam filters reduce the volume of spam to a level that you
can process it by hand.  (That is, ether delete it or file a LART.)  A
challenge message has little benefit.  (Much of what gets through
SpamAssassin is stuff that wouldn't happen if SPF was widely used.)

Secondly, by sending a challenge to a spammer, you are confirming your
email address as being live.  This is a good reason to *not* use a C/R
system.


-wayne

-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Latest draft at http://spf.pobox.com/draft-mengwong-spf-02.9.4.txt
To unsubscribe, change your address, or temporarily deactivate your
subscription, 
please go to
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡

-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Latest draft at http://spf.pobox.com/draft-mengwong-spf-02.9.4.txt
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡


<Prev in Thread] Current Thread [Next in Thread>