Re: [9fans] ISP filtering - update

[Lucio De Re <lucio@proxima.alt.za>]

On Fri, Sep 26, 2003 at 08:07:16AM -0400, David Presotto wrote:
>
> > No, the right idea is to build your own, white- or blacklist.  In
> > PGP, you ask your friends to sign your key, eventually you may be
> > lucky to hit common signatories and the web of trust starts happening.
> > Can't say I've seen it in action, but it may well work.
>
> SMTP mostly comes from providers (ISP's) and not your friends (unless
> your friends happen to own ISP's).

But SMTP "has" to specify a MAIL FROM which should match a whitelist
entry (with certificate to stop repudiation).  That doesn't take
much unless the certificate needs to be exchanged too.

The other option is to use SSL or TLS to carry SMTP (surely such
a thing already exists?) and assign responsibility for delivered
spam to the client establishing the session.  In other words, I
inspect your certificate, decide I can identify you in front of
a judge and accept the mail.  Otherwise, you're out of luck.

++L