Re: [Asrg] Please critique my anti-spam system

[Danny Angus <Danny_Angus at slc.co.uk>]

> Create
> the lhs of the Message-ID signed with a private key that changes
> daily.  If the "response" doesn't have one you could have generated
> recently, it's bogus.

It is a compelling idea, but remember that the message id can be generated
at any of a number of different tiers (hops) and can't be altered once it
has been created. This itself isn't a problem. If each tier uses this
system we have a kind of granuarity of attribution (sent by me, sent by my
office, sent by my office's ISP) and gradually weakening "trust" but it
also means you need to publish the public keys upwards to allow any of the
higher tiers determine if the mail is sent by a legitimate subsidiary tier.

You would want to do this because it would allow you to remove bogus
messages near the top of the stack and save infrastructure resources by not
having to transfer it any further.

I'm sure that similar systems have been dicussed in the past, I know I've
discussed some ideas around trust based systems, I also think there is
still a lot of merit in the idea if it could be made to work. It seems that
dicussions faded out as people spiralled their ideas in towards MARID.

d.


***************************************************************************
The information in this e-mail is confidential and for use by the addressee(s) only. If you are not the intended recipient (or responsible for delivery of the message to the intended recipient) please notify us immediately on 0141 306 2050 and delete the message from your computer. You may not copy or forward it or use or disclose its contents to any other person. As Internet communications are capable of data corruption Student Loans Company Limited does not accept any  responsibility for changes made to this message after it was sent. For this reason it may be inappropriate to rely on advice or opinions contained in an e-mail without obtaining written confirmation of it. Neither Student Loans Company Limited or the sender accepts any liability or responsibility for viruses as it is your responsibility to scan attachments (if any). Opinions and views expressed in this e-mail are those of the sender and may not reflect the opinions and views of The Student Loans Company Limi!
 ted.

This footnote also confirms that this email message has been swept for the presence of computer viruses.

**************************************************************************

_______________________________________________
Asrg mailing list
Asrg at ietf.org
https://www1.ietf.org/mailman/listinfo/asrg