Slashdot Mirror


The Anti-Spam Research Group's Plan for Spam

egoff writes "Speaking of standards, the ASRG, a member of the IETF, has a plan for "consent-based communications." Among the suggestions, according to Internet Week, are authentication services for falsified addresses, trusted senders, reputation systems (karma?), opt-out tools, best practices for challenge/response, and even a proposal for micropayments on unwanted mail. Instead of defining spam, the ASRG wants to provide administrators and users the tools necessary to avoid what they consider to be unwanted. One of the tools, Reverse MX, is expected to be in place in several months. It would allow the receiving mail server to query a domain to determine if the sending server is allowed to send on its behalf."

5 of 225 comments (clear)

  1. The Solution to Spam Is Obvious by Ignorant+Aardvark · · Score: 4, Funny

    We already know who some of the spammers are. Heck, some of them have admitted it! What we need is good old-fashioned mob justice. If we all have a hand in the lynching, how are the coppers supposed to know who exactly did the killing? I suggest that we rename Saturday Spamurday. Every Spamurday we all mob the home of a spammer and lynch them in a very public manner. Soon, the spam should start dropping off, because who would dare risk their lives to mob justice to make a few bucks selling penis enlargers?

  2. Re:RMX is designed to take care of that by dzym · · Score: 3, Funny
    So the onus is upon the individual domain owners who would not wish people to spoof using their domains?

    Sounds like adoption rates will be high and this plan will take off like a rocket.

  3. Re:Cooperate and I'll Read by ryanvm · · Score: 4, Funny

    I don't want emails about printer toner, or bigger schlongs.

    I thought I was getting 50 spam messages a day before I found out that it was just my wife trying to get me a bigger dingus.

  4. Erm... by aaaurgh · · Score: 3, Funny

    "the ASRG wants to provide administrators and users the tools necessary"

    Are they going to e-mail everyone with an offer to sign up? Oops! ;-)

    --

    Go permanent? In your dreams and my worst nightmares.
  5. Re:Here's 2 examples and an alternative protocol. by I_redwolf · · Score: 2, Funny

    Say I run a small Linux server on my DSL line. I have a friend give me a DNS entry off of his domain, as I have a static IP on my server. I now have a DNS which can receive emails, only that it won't reverse DNS the same because my ISP owns the IP address block. I can't send emails now from my server because nobody reverse authenticates me.

    Incorrect.. you isp does reverse authenticate it's IP address still. Feel free to "host yourip" and you'll get your reverse ptr domain. To see how this works I wrote in detail to another slashdot user who wanted to know. Here is the post you might want to read.. oddly enough it was only 2 weeks or so ago that again I was talking about this.

    Say that I am a student on a university campus, which for some reason won't allow SMTP sending from outside the network as inside the network. This is as it should be, right? But it does allow POP. My computer is on the campus network and configured with whatever mail client it uses. Then suddenly, I'm on spring break, and I bring my laptop home to my families DSL/WiFi network. I can still download my mail, but since I'm off campus network, I can't be authenticated as myself to the mail server. No problem. My ISP lets me send mail with their mail server. Oh wait, new restrictions prevent me from sending this email.

    This one doesn't even make sense. That situation has nothing to do with this new system we are speaking. You're problem could of been easily fixed with SMTP-AUTH if you're talking about what I think you're talking about or IMAP or something along those lines. That is just too confusing to even decipher.

    The rest of it is you just trolling... right? If not you really should search google for smtp-auth, pgp mail and then search for challenge mail systems.

    Making the sender be authenticated by DNS is a bad idea. I can spoof any IP I want to with the right TCP/IP packets.

    ?? So you're going to spoof an IP and then hack the dns server wherever the ip belongs to, to reverse to a valid domain?

    Heh, no offense, but you're making absolutely no sense. Haven't provided any scenarios and the protocol you speak of just simply doesn't make sense.. This whole post just doesn't make sense. Is it the chewbacca defense?