North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Sender authentication & zombies (was Re: Time to check therate limits on your mail servers)

  • From: Douglas Otis
  • Date: Sun Feb 06 02:50:37 2005

On Sat, 2005-02-05 at 19:10, J.D. Falk wrote:
> On 02/05/05, Douglas Otis <[email protected]> wrote: 
> > DK or IIM makes it clear who is administering the server and this
> > authentication permits reputation assessment.  Add an account
> > identifier, and the problem is nailed.
> Ah, so you're saying that only the reputation of individual
> e-mail addresses is worth paying attention to?  How do you
> expect that to scale to billions of messages per day?

Without authenticating an identity, it must not be used in a reputation
assessment.  Currently this is commonly done by using the remote IP
address authenticated through the action of transport.  In the name
space there are two options, the HELO and a validated signature.  DK and
IIM are attempting to allow the signature solution to scale.