Re: tmda: Challenge-response is fundamentally broken (RAPNAP)

2003-09-08 Thread Craig Sanders
On Sat, Sep 06, 2003 at 11:32:04PM +1000, Russell Coker wrote: > DNSBL's and spamassasin seem quite good at dealing with spam and are much > less annoying. That combined with some new laws that are being enacted to > combat spam should keep it to a managable level. oh, please tell me that these n

Re: tmda: Challenge-response is fundamentally broken (RAPNAP)

2003-09-06 Thread Andrew Suffield
On Sat, Sep 06, 2003 at 06:02:07PM -0500, david nicol wrote: > Don't hate spammers, figure out a way to bill them. They are in > business, they pay for things, they expect to be billed. Everyone > who has considered sender-pays agrees that it provides a better solution > than legislation. Again

Re: tmda: Challenge-response is fundamentally broken (RAPNAP)

2003-09-06 Thread david nicol
On Sat, 2003-09-06 at 08:32, Russell Coker wrote: > Here's how it works. Spammer creates account [EMAIL PROTECTED] and sends > their first spam to a C-R system, when the challenge comes in they > acknowledge it and from then on the C-R system does not bother them because > they keep using the

Re: tmda: Challenge-response is fundamentally broken (RAPNAP)

2003-09-06 Thread Russell Coker
On Sat, 6 Sep 2003 06:56, david nicol wrote: > > > Unlike TMDA's distributed profusion of extended addresses, a > > > central RAPNAP (return address, peer network address pair) database > > > only needs to send out a challenge when you change your outgoing > > > SMTP server. In effect, a central s

Re: tmda: Challenge-response is fundamentally broken (RAPNAP)

2003-09-05 Thread Andrew Suffield
On Fri, Sep 05, 2003 at 03:56:16PM -0500, david nicol wrote: > > For challenge response to work it has to be annoying to lots of people. > > Anything that stops it being annoying will stop it working. That's why > > it is broken. > > Challenge-response, BY ITSELF ONLY, suffers from that problem

Re: tmda: Challenge-response is fundamentally broken (RAPNAP)

2003-09-05 Thread david nicol
On Fri, 2003-09-05 at 00:16, Russell Coker wrote: > On Thu, 4 Sep 2003 18:32, david nicol wrote: > > I've been trying to popularize a centralized challenge-response > > database since last fall. It seems to me that becoming a debian > > package maintainer for the software to use it would make sens

Re: tmda: Challenge-response is fundamentally broken (RAPNAP)

2003-09-05 Thread Russell Coker
On Thu, 4 Sep 2003 18:32, david nicol wrote: > I've been trying to popularize a centralized challenge-response > database since last fall. It seems to me that becoming a debian > package maintainer for the software to use it would make sense. > > Unlike TMDA's distributed profusion of extended add

Re: tmda: Challenge-response is fundamentally broken (RAPNAP)

2003-09-04 Thread david nicol
Hello I've been trying to popularize a centralized challenge-response database since last fall. It seems to me that becoming a debian package maintainer for the software to use it would make sense. Unlike TMDA's distributed profusion of extended addresses, a central RAPNAP (return address, peer