Re: The 'failure' of SMTP RE: DNS Choices: Was: [ietf-dkim] Re: Last Call: 'DomainKeys

Tony Finch <dot@dotat.at> Wed, 22 November 2006 18:06 UTC

Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1GmwUM-0008PX-I8; Wed, 22 Nov 2006 13:06:26 -0500
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1GmwUJ-0008Nx-SW for ietf@ietf.org; Wed, 22 Nov 2006 13:06:23 -0500
Received: from ppsw-7.csi.cam.ac.uk ([131.111.8.137]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1GmwUH-0006my-F3 for ietf@ietf.org; Wed, 22 Nov 2006 13:06:23 -0500
X-Cam-SpamDetails: Not scanned
X-Cam-AntiVirus: No virus found
X-Cam-ScannerInfo: http://www.cam.ac.uk/cs/email/scanner/
Received: from hermes-1.csi.cam.ac.uk ([131.111.8.51]:44512) by ppsw-7.csi.cam.ac.uk (smtp.hermes.cam.ac.uk [131.111.8.157]:25) with esmtpa (EXTERNAL:fanf2) id 1GmwU4-00051w-PT (Exim 4.63) (return-path <fanf2@hermes.cam.ac.uk>); Wed, 22 Nov 2006 18:06:09 +0000
Received: from fanf2 (helo=localhost) by hermes-1.csi.cam.ac.uk (hermes.cam.ac.uk) with local-esmtp id 1GmwU4-00009a-Nc (Exim 4.54) (return-path <fanf2@hermes.cam.ac.uk>); Wed, 22 Nov 2006 18:06:08 +0000
Date: Wed, 22 Nov 2006 18:06:08 +0000
From: Tony Finch <dot@dotat.at>
X-X-Sender: fanf2@hermes-1.csi.cam.ac.uk
To: Michael.Dillon@btradianz.com
In-Reply-To: <OF4FDF1E7A.60AC1A11-ON8025722E.0056DBD7-8025722E.005AD672@btradianz.com>
Message-ID: <Pine.LNX.4.64.0611221744270.22572@hermes-1.csi.cam.ac.uk>
References: <OF4FDF1E7A.60AC1A11-ON8025722E.0056DBD7-8025722E.005AD672@btradianz.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset="US-ASCII"
X-Spam-Score: 0.0 (/)
X-Scan-Signature: 7baded97d9887f7a0c7e8a33c2e3ea1b
Cc: ietf@ietf.org
Subject: Re: The 'failure' of SMTP RE: DNS Choices: Was: [ietf-dkim] Re: Last Call: 'DomainKeys
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
Errors-To: ietf-bounces@ietf.org

On Wed, 22 Nov 2006, Michael.Dillon@btradianz.com wrote:
>
> Mail servers will still exchange messages with known and trusted peers.
> A new mail server operator will have to arrange a trusted peer
> relationship with one or more existing operators at some point in the
> hierarchy. A mail user will have a trusted relationship with a local
> server operator. Many messages will have to be relayed because there is
> no one-level trust relationship between sender and recipient. Mail will
> flow along the chain of trust. And everybody will be motivated to keep
> those chains intact because when they break, messages stop flowing.

This sounds like the Usenet architecture, or the BGP architecture.

Usenet did not escape spam. Spammy usenet servers were not reliably cut
off - certainly the trust relationships between server operators did not
provide an effective way to stop spam. Your last sentence above is the
reason why: keeping legitimate communication working is more important
than the inconvenience of spam.

You can apply the same logic at the level of BGP routing: there
are trust relationships between networks, some of which are clean and some
of which are infested with criminals. The latter spoil it for the rest of
us but they are still not cut off.

For a third example of reluctance to punish the innocent, look at the
hatred directed at DNS blacklists that deliberately block people who are
unlucky enough to be too close in network space to spammers.

Given this, your proposed architecture is just as vulnerable to botnets as
the open SMTP architecture. There are always going to be enough admins who
don't cut off infected machines and who also have enough legitimate
customers that their upstreams won't cut the whole network off. This will
be enough to poison the well.

Tony.
-- 
f.a.n.finch  <dot@dotat.at>  http://dotat.at/
BAILEY: CYCLONIC BECOMING NORTHWESTERLY SEVERE GALE 9 TO VIOLENT STORM 11,
OCCASIONALLY HURRICANE FORCE 12 IN SOUTH, DECREASING 7 TO SEVERE GALE 9 LATER.
HIGH OR VERY HIGH. RAIN OR SQUALLY SHOWERS. MODERATE OR POOR.

_______________________________________________
Ietf mailing list
Ietf@ietf.org
https://www1.ietf.org/mailman/listinfo/ietf