>I would be very interested in participating in a new working group or >mailing list that concentrates on reputation services that can build >on the excellent work done so far in the DKIM group.
Oh, good. The IAR subgroup in the ASRG has been languishing for ages waiting for people to pick up on the reputation question. It belongs in the ASRG rather than an IETF group because, unless I've missed some recent developments, we have only the vaguest idea what a reputation system would actually do. The technical details of publishing domain reputation data are pretty simple. You could do it through DNS, e.g., if you want to look up dubious.com in a reputation system called reputationservice.org, you'd do a DNS query on dubious.com.reputationservice.org, and it'd return, well, something, a numeric rating as an A record or a description as a TXT record perhaps. Or if you want to query with HTTP, it's just as easy, fetch http://reputationsystem.org/dubious.com and the server hands you back a MIME-wrapped block of something. It's figuring out what the something is that's hard, and that's what we've got to work on. See http://asrg.sp.am/subgroups/iar.shtml R's, John _______________________________________________ ietf-dkim mailing list http://dkim.org
