-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Godmar Back wrote:
| may I chime in that discussion, focusing on one point: you mentioned
| you've found that most people are repelled by the TMDA idea.  Is this
| anecdotal evidence, or did you do an actual study or do you know of
| any studies other people might have done?

My anecdotes:

1. People sometimes spam forged to appear from my domain, and they write back
with a "screw you" email (and I'm talking about literally one line emails
that say little more than "screw you").  When I audited my pending queue some
time ago, I found three such emails.  Two of them had been confirmed.
Imagine folks whose investment is just a one line message, and a challenge
that calls into question whether it's even addressed to the right person.
Two out of three replied.

2. I've seen messages blocked and stay blocked because the return-path on the
message is bad.

| In short, in such a scheme that would be no need for whitelisting or
| blacklisting whatsoever; the system would be entirely token-based: if
| you hold a token from me (a keyword address) you can send me email.
| If all you have is my public email address, you have to get a token
| first.  Whenever I want someone to send me mail (my family, my
| students, my boss, a mailing list) I issue a keyword address for that
| particular purpose.  Of course, such a system would require extensive
| database/mail client support to make sure I can issue (and if
| necessary, revoke) keyword addresses quickly and to ensure that I can
| quickly sort my email based on the likely sender.

I don't see why a database is necessary unless you're planning to revoke a
lot of addresses.  What you're describing is already possible with TMDA, and
it doesn't need to store a list of issued tokens.  The only odd thing about
it is to issue a challenge that contains a keyword address.

Kyle.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFBSe2JzS7R/flctWYRAsMGAKCSansSEdezTrebdIuZ3lHb3ZbwqgCdExqM
5bCY2N83AjpB8lOT8MjL6+Q=
=VzbC
-----END PGP SIGNATURE-----
_____________________________________________
tmda-users mailing list ([EMAIL PROTECTED])
http://tmda.net/lists/listinfo/tmda-users

Reply via email to