On Thu, 4 Sep 2003, Kjetil Brekke wrote:

>PS Isn't it time auth over smtp became somewhat of a standard. Would make
>it easier over time to kill the spam business.
>Just a thought ;)

Open Relays used to be a problem, but have mostly been taken care of.  In 
fact, open relays are extremely rare on the internet.  Much more of a 
problem are indirect open relays, such as insecure proxy servers.

Locking down SMTP to allow relay only from your IP Address blocks as an 
ISP does the same thing as SMTP authentication does in regards to blocking 
spam.  The advantage SMTP authentication gives you is that you can send 
email while not on the IP addresses of your ISP (while travelling for 
example).

What needs to be done to combat spam is a sort of sender authentication.  
Which can't be completely implemented without going to another standard.  
We're at pop3, why not smtp2...

As it stands, it is too easy to lie about where an e-mail message has been 
and who it is from, and that is perfectly valid to do with the current 
version of SMTP.


Christopher Fisk
--
A BURP IS NOT AN ANSWER
A BURP IS NOT AN ANSWER
        Bart Simpson on chalkboard in episode 9F07

--
[EMAIL PROTECTED] mailing list

Reply via email to