World Summit On The Internet And IT

eegad writes "The Seattle PI reports on the upcoming first phase of the World Summit on the Information Society to be held in Geneva on December 10-12. 192 nations are involved in the effort to set some ground rules for the Internet (a little late, eh?) including ways to deal with spam, a possible "digital solidarity fund" to help developing nations, and discussion of UN regulation. The goal of this phase is to adopt a "Declaration of Principles" and "Plan of Action". Some countries plan on asking for a UN commission to study new ways of running the Internet aimed at the 2005 phase. The official website will provide coverage of the event. How come I wasn't invited?" The Washington Times also has a piece on it, as well. We had covered this a bit before.

Comments

Re:cross your fingers..

[Zocalo]

Actually, given the probable means of applying the death penalty in Nigeria (stoning), combined with the Nigerian government's efforts to crack down on 419 scams, I rather hope Nigeria *does* have a big say at the conference... I'll be right at the front of the queue for a bag of gravel, and some nice pointy rocks when the first spammers get marched out.

Re:Best thing they can do

[Hubert Q. Gruntley]

Agreed on most points.

I'm not sure PKI needs to be part of the SPAM solution. Three reasons:
1) The same clueless ficktwizzles that set up their mail servers as open relays (224K of them? according to ORDB.org) will also be setting up their mail server certificates. No, this isn't fraught with peril.

2) There isn't a black market (that I'm aware of, doh) of private keys. Client certificates are useless, server certificates are useless unless you also own the domain name, code signing certificates, well, um, yeah I guess those are dangerous. But we've seen the lengths spammers will go, and I can easily foresee a huge market for stolen certificates, if now every domain has one to send mail.

3) The _last_ thing we need to do is get Verisign slobbering over using certificates for email. Over in the SPF discussion mailing list there are Verisign people who want certificates in the DNS records published by SPF.