On Oct 17, 2009, at 5:32 AM, Rich Kulawiec <r...@gsp.org> wrote:

> On Fri, Oct 16, 2009 at 12:04:08PM -0500, Dan White wrote:
>> I'm proposing a little more thinking outside the box here. SMTP  
>> does need
>> to go way, and be replaced by something better: Something that does  
>> not
>> inherently suffer from the problems of SMTP today, but is based on
>> something with better two-way trust.
>
> Protocol is irrelevant.  *Nothing* a known-compromised system does
> can be trusted.

With a fully authenticated protocol we could limit the valid source  
addresses of the spam to the one associated with the compromised user.

Dosent solve the problem but it does simplify it a bit.
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

Reply via email to