spf-discuss
[Top] [All Lists]

RE: Authentication, Accreditation, and Reputation

2004-08-14 05:53:39
JohnP -

That's all sounding like we have to join a club in order to
send mails that will be read, and that means some kind of
central authority, someone taking money, etc, etc.  All
things which are a "bad thing"  IMHO. 

Not everyone will need to use an accreditation service to
get email to the intended recipient's mail box.

Some will be granted a good reputation. However, this will
not happen for everyone. 

In many cases for example, there will not be enough data.

People without a reputation do not have to use an
accreditation service.

The purpose of an accreditation service is to:

* facilitate the process of obtaining and maintaining a
good reputation; 

* aid in the process of having the sender's message
delivered to the intended recipient's mailbox.

A person may decide, since I have published the appropriate
SPF, E-mail policy, CSV records, I am prepared to allow
sufficient data to accumulate and gain a good reputation. 

In the meantime, depending on local policy of receiving MTAs
this individual's email will likely be subject to 'greater
scrutiny' at network gateway filters for header and body
'spamminness.' 

The penalty scheme is not workable - who's going to collect
a fine from a spammer in the Ukraine?  

You could be surprised:-)

The most effective penalty of all is to be "black-listed"
or have a "bad reputation" and therefore not have your
mails get through.

Understood.

It sounds like your requirements can be filled by something
like gossip where the reputation is virtual accreditation
by users according to your behaviour.

Not to my knowledge although I stand to be corrected.

Is it not true that the accreditation schemes are fine for
the big businesses (including spammers) but will really
hurt the individual user who happens to run his own MTA
(like me)?

Without commenting on existing services, some people feel
there is a need to put together an accreditation service
geared towards the micro business and individual.

Again thank you for your feedback.

John

John Glube 
Toronto, Canada

The FTC Calls For Sender Authentication
http://www.learnsteps4profit.com/dne.html
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.734 / Virus Database: 488 - Release Date: 04/08/2004