Re: OT: Delirium...

2006-04-03 Thread Kevin W. Gagel
So everytime someone uses your copyrighted dns entry YOUR
going to:
Find them
Sue them
Prove in a court of law it was them
etc...

- Original Message -
Well, I was off on Vancouver Island for nearly a week, and
didn't take a laptop with me...  Clearly it caused some
major trauma because I had the following hallucinatory
idea:

I was thinking about the issue in which sending spam isn't
a crime in a lot of countries, or if it is that it's poorly
enforced.

Then I thought of SPF, Domain-Keys, and ways to enforce
authenticity using existing laws...

And came up with this idea.

What if we had a TXT Record in the DNS for a domain that
looked like:

@IN TXT   XYZZY 123 456  (C) Copyright
2006 Redfish Solutions, LLC

And then had hosts participating in this scheme generate
outgoing mail as:

X-Yes-Its-Really-Me: XYZZY 123 456 (C) Copyright 2006
Redfish Solutions, LLC

and uses the presence of this copywritten key to match the
appropriate string
in the DNS as proof that the sender is who he says he is.

Then if the scheme were widely adopted (we could have an
applet or script that generated a random string and primed
the DNS with it or could be easily cut-n-pasted into the
DNS configuration... the MTA could of course extract the
string easily, as could anyone else for verification), then
it would be a
leverage point if someone started forging emails.

While sending spam might not be a crime in all civilized
countries, copyright
infringement is.

Is that too out there?

-Philip


=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
My Blog:
http://mail.cnc.bc.ca/blogs/gagel

---
The College of New Caledonia, Visit us at http://www.cnc.bc.ca
Virus scanning is done on all incoming and outgoing email.
Anti-spam information for CNC can be found at http://avas.cnc.bc.ca
---


Re: OT: Delirium...

2006-04-03 Thread Gene Heskett
On Monday 03 April 2006 14:16, Philip Prindeville wrote:
Well, I was off on Vancouver Island for nearly a week, and didn't take
 a laptop with me...  Clearly it caused some major trauma because I
 had the following hallucinatory idea:

I was thinking about the issue in which sending spam isn't a crime in
 a lot of countries, or if it is that it's poorly enforced.

Then I thought of SPF, Domain-Keys, and ways to enforce authenticity
using existing laws...

And came up with this idea.

What if we had a TXT Record in the DNS for a domain that looked like:

@IN TXT   XYZZY 123 456  (C) Copyright 2006 Redfish
Solutions, LLC

And then had hosts participating in this scheme generate outgoing mail
 as:

X-Yes-Its-Really-Me: XYZZY 123 456 (C) Copyright 2006 Redfish
 Solutions, LLC

and uses the presence of this copywritten key to match the appropriate
string
in the DNS as proof that the sender is who he says he is.

Then if the scheme were widely adopted (we could have an applet or
 script that generated a random string and primed the DNS with it or
 could be easily cut-n-pasted into the DNS configuration... the MTA
 could of course extract the string easily, as could anyone else for
 verification), then it would be a
leverage point if someone started forging emails.

While sending spam might not be a crime in all civilized countries,
copyright
infringement is.

Is that too out there?

-Philip

No, but I'd expect it would take a netwide RFC to enable it, and of 
course the commercial interests wouldn't touch that idea with a 100 
foot pole..

-- 
Cheers, Gene
People having trouble with vz bouncing email to me should add the word
'online' between the 'verizon', and the dot which bypasses vz's
stupid bounce rules.  I do use spamassassin too. :-)
Yahoo.com and AOL/TW attorneys please note, additions to the above
message by Gene Heskett are:
Copyright 2006 by Maurice Eugene Heskett, all rights reserved.


Re: OT: Delirium...

2006-04-03 Thread Philip Prindeville
That might not be necessary.

A lot of ISP's have a zero tolerance policy for copyright infringement,
even if they don't enforce spamming policy.

-Philip


Kevin W. Gagel wrote:

So everytime someone uses your copyrighted dns entry YOUR
going to:
Find them
Sue them
Prove in a court of law it was them
etc...

- Original Message -
  

Well, I was off on Vancouver Island for nearly a week, and
didn't take a laptop with me...  Clearly it caused some
major trauma because I had the following hallucinatory
idea:

I was thinking about the issue in which sending spam isn't
a crime in a lot of countries, or if it is that it's poorly
enforced.

Then I thought of SPF, Domain-Keys, and ways to enforce
authenticity using existing laws...

And came up with this idea.

What if we had a TXT Record in the DNS for a domain that
looked like:

@IN TXT   XYZZY 123 456  (C) Copyright
2006 Redfish Solutions, LLC

And then had hosts participating in this scheme generate
outgoing mail as:

X-Yes-Its-Really-Me: XYZZY 123 456 (C) Copyright 2006
Redfish Solutions, LLC

and uses the presence of this copywritten key to match the
appropriate string
in the DNS as proof that the sender is who he says he is.

Then if the scheme were widely adopted (we could have an
applet or script that generated a random string and primed
the DNS with it or could be easily cut-n-pasted into the
DNS configuration... the MTA could of course extract the
string easily, as could anyone else for verification), then
it would be a
leverage point if someone started forging emails.

While sending spam might not be a crime in all civilized
countries, copyright
infringement is.

Is that too out there?

-Philip




=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
My Blog:
http://mail.cnc.bc.ca/blogs/gagel

---
The College of New Caledonia, Visit us at http://www.cnc.bc.ca
Virus scanning is done on all incoming and outgoing email.
Anti-spam information for CNC can be found at http://avas.cnc.bc.ca
---
  




Re: OT: Delirium...

2006-04-03 Thread Kelson

Philip Prindeville wrote:

And then had hosts participating in this scheme generate outgoing mail as:

X-Yes-Its-Really-Me: XYZZY 123 456 (C) Copyright 2006 Redfish Solutions,
LLC

and uses the presence of this copywritten key to match the appropriate
string
in the DNS as proof that the sender is who he says he is.


This sounds a lot like the original scheme for Habeas www.habeas.com, 
which used a copyrighted haiku that licensed senders could put in their 
email headers.  Habeas would make sure they weren't spammers, filters 
could check for the haiku as a sign of non-spam, and when spammers used 
the haiku, they'd take them to court for copyright infringement.


It worked for maybe a year.  Then spammers started forging it on a 
massive scale, using botnets so Habeas couldn't just add the IPs to 
their list of known infringers (and had a hard time tracking them down). 
 In the end, they abandoned the haiku and switched to an IP-based 
whitelist.


--
Kelson Vibber
SpeedGate Communications www.speed.net