>Any email address oracle service will find its biggest consumer to be
>spammers. I do not think anyone will deploy such on oracle/service.

This is certainly true.  The SMTP protocol has always had oracle
commands VRFY (does this address exist?) and EXPN (what are the real
address(es) for this address?)  The number of MTAs that currently
provide support either of those rounds to zero.

On the other hand, I think that a lookup service that takes an address
and returns a key would be workable.  Yeah, spammers will try to
scrape addresses from it, but it's the same attack as RCPT TO probing
and we have workable defenses against that.

R's,
John

_______________________________________________
dane mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dane

Reply via email to