[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Cryptography] Paid SMTP (PSMTP)
- From: tifkap <metzdowd AT bikkel.org>
- Subject: Re: [Cryptography] Paid SMTP (PSMTP)
- Date: Thu, 1 Mar 2018 13:43:45 +0100
- Arc-authentication-results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of cryptography-bounces+ben=bentasker.co.uk AT metzdowd.com designates 220.127.116.11 as permitted sender) smtp.mailfrom=cryptography-bounces+ben=bentasker.co.uk AT metzdowd.com
- Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=sender:errors-to:list-subscribe:list-help:list-post:list-archive :list-unsubscribe:list-id:precedence:subject:in-reply-to :mime-version:references:message-id:to:from:date:delivered-to :arc-authentication-results; bh=oVnzO2ncFnKGOfGbneM7R9l9hOzSykTduOzF1RXpLe8=; b=ewxpm0DOJ3UD5Vsq1ZlEk1cQ3M52wr1NHxv/b7PImCbb/BFFJd4vOyWdgX2E4DFbgY sAaqaCP0N1nvhxFDgCfF3Qd57q8tNkkMG7hSRhnaGvESBTtA7L9H6Isq9Z8/1O5IHVkm G4ICMGv/64cRm1mfIIKTLjtc6UbQmxGdvcaIEBUElk9XHJ/cAzypYKF6rnaWigCl3U89 y/r0DbVGhmieFLV0RODb8vyFbFXj2ZuiYmoH/SDKutpwVmR59HpQfN6SsMOZEhjhgPBt UfV7MilGCyR3+0luky0dU7Fuy8V6iviFUl1TNTb/t1f0WfPx1hLXD3+Kll8r72O6szE5 V4uQ==
- Arc-seal: i=1; a=rsa-sha256; t=1519973019; cv=none; d=google.com; s=arc-20160816; b=Z8w66J5NIRefRTO/ZGkTw4CwF0doay3eWnFen+7Ty8fyL66xtW553abQLbOmkSI6m2 C7THTQQ6TOIc87nuO5q7PmaLqc8twCFCWV56HBUBdvJ6OCTQjnb2lGRPxBn4sPmzgPF5 MMAbTf7q6FfjHPuXCM/kRiauSXz/BZaO40jG9qpUe7rpflcCBk3PY9MaK1DUG4bDfC63 BW6JkiQYX5zN7j1Lx3LkdSHTu56J2KZDeRQ3psgic5UvWeOPcrTtTtPhEIwM6/Z9oCFn O0x+VgI4yFzwKQJAT/2oFwXhAbKUV3Lq9NMBb1GK7znuihuzDC1xYysvSFBz1OquEq6p ALNg==
- List-archive: <http://www.metzdowd.com/pipermail/cryptography/>
- Sender: "cryptography" <cryptography-bounces+ben=bentasker.co.uk AT metzdowd.com>
- To: cryptography AT metzdowd.com
> 2018-03-01 1:15 GMT+03:00 tifkap <metzdowd AT bikkel.org>:
> >┬ ┬ First, your mail has gone to my spam box at Gmail, which
> funnily shows
> >┬ ┬ we must do better anti-spam. Well, PSMTP├ does not suffer
> >┬ ┬ positive.
> Of course it does. If I want to spam people, and I'm willing to pay
> a bit more,
> I could do this under a P-SMTP schema. It would simply rise spam
> prices, not
> eliminate them.
> So spamming al CEO's of all fortune 100 company's would cost 1
> dollar instead of
> of 0.0001 dollar .. big deal. In other words: spam would still
> exist, but it would
> be more targeted, because it would be to expensive otherwise.
> I would still 'vote' spam into the spambox, because I don't care
> that the sender
> paid for it. It's still digital crap I don't want to receive (to put
> it mildly).
> Dear Paul,
> Please do not judge the P-SMTP world with SMTP glasses. I take it as a
> responsibility to fail explaining P-SMTP world in mail format.┬ A paid
> spam does not have a second chance, and will get blacklisted
And if there is a working global reputation system, then why not use this
system instead of pSMTP?
> It is a world with different habbits and routines. A
> finer segregation of incoming mails. It is where your main mail box is
> cleaner, smaller, and full of relevant mails.. It is a mailbox where a
> spam would be too obvious to spot and kick to death. Kicking a seldom
> spam in a beautiful P-SMTP enabled mailbox is a different story than
> strolling through junk mail to find false positives and greys or a
> mailbox of all shades of grey to be sure to blacklist the spammers
> only.┬ A PSMTP user will have no mercy for a *paid* spam and it will be
> just one click to send it to the blacklist hole.
There is no such thing as 'the blackhole list'. There are no organised global
blacklists, just a bunch of disconnected rbl's uribl's and hashix dns bl's.
> I just checked my
> mailbox and spam box. A great deal of the content on both boxes were
> more or less the same for me. I remember deadly false positives and I
> still really have to stroll through a significant list in my mailbox to
> find the really necessary ones to read.
I thing you need a better spamfilter (provider).
> I accept the grey phenomenon, I
> survive, but if this is what we get for the price that majority of the
> mail trafic is sucked by spam, well, I don't accept it. I think the
> time for a paradigm shift on the mail thing has come.┬
> In the above scenario, the spammer not only spends a penny but a
> precious spam resource as well.
Of course not. The majority of spam is sent through hacked php-accounts, bots,etc.
In other words: some poor smuck who is clueless about computers would pay the
bill (think: elderly people, dumb people, etc).
> What does he get in return? Nothing but
> a real kick. Would he risk spamming a P-SMTP account (remember P-SMTP
> BL scheme including DNS BL)?
Would a criminal hesitate about buying a couple of thousand hacked smtp-
accounts to spam milions of people, and let other people pick up the tap /
Since this is allready the way most spammers work, I don't see why they would
not continue to operate that way.
> I don't think so.┬ The very existence of
> anti-spam techniques like greeting delay, greylist temporary rejection,
> nolisting, quit detection all show that when there is a little bit of
> trick in the mail transaction,┬ spammers don't bother┬ and move on to
> another mail address in their list where the process runs in a less
> tricky manner.
No they don't! The moment a couple of systems on the internet do these kind
of things spammers don't bother about how them. But the moment a substancial
number of systems use it spammers simply adjust.
And besides that: lot's of spam (most) is send through legitimate systems, that
do things by the book (so greylisting, etc doesn't work against those systems).
> Therefore, a blacklisting threat would be more than
> enough to scare spammers away.
So paying/e-stamping is useless, blacklisting is the solution? Blacklisting
hasn't worked so far, but don't let that stop you.
> P-SMTP is not just a protocol, it is a philosophy, a spirit, a space of
> new habits, attitudes and routines, backed by ubiquitous, convenient
> private key scheme on end-point TEE security.
> P.S. I received a spam phone call for VIP services for Monaco Grand
> Prix as I was writing this reponse:) Guys, this shit's got to go:)
The cryptography mailing list
cryptography AT metzdowd.com