spf-discuss
[Top] [All Lists]

RE: reputation systems and RHSBLs

2004-06-13 03:14:26
Keeping the API secret and reserved
to a small number of trusted peers would cancel the anonymity and
protection from lawsuits benefit.

Spammers will reverse engineer the API. There is no way of keep such a thing
secret.

James

-----Original Message-----
From: owner-spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
[mailto:owner-spf-discuss(_at_)v2(_dot_)listbox(_dot_)com]On Behalf Of Michel Py
Sent: Saturday, June 12, 2004 9:58 PM
To: spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
Subject: RE: [spf-discuss] reputation systems and RHSBLs


Meng Weng Wong wrote:
Should we start such a reputation system ourselves?
If so, could we propagate it through cutting-edge
peer-to-peer anonymizing network systems?


Setting aside the throw-away domains issue that will exist with every
reputation system, is see major road-block with this: there is little
you can do to prevent spammers from stuffing the ballot box (detail
follows).

Long version: there needs to be an API to allow software developers to
incorporate reporting the spam-to-good ratio and/or numbers to peers
into their MTA software.

How do you prevent spammers from participating in the peer network and
reporting large numbers of invented good emails for their domains? If
the system is to be entirely automatic (meaning: no human review) this
could prove extremely challenging. Keeping the API secret and reserved
to a small number of trusted peers would cancel the anonymity and
protection from lawsuits benefit.

My $0.02 (plus CA tax)

Michel.

-------
Sender Policy Framework: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Send us money!  http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com

---
Mail scanned for all known viruses by James Pullicino.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.692 / Virus Database: 453 - Release Date: 5/28/2004

---
Mail scanned for all known viruses by James Pullicino.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.692 / Virus Database: 453 - Release Date: 5/28/2004