On Thu, 27 Jun 2002, Robert Strickler wrote:

> How does everyone feel about building the logic to create and maintain a
> database of unsubscribe/removes that actually remove an address.

This sounds like a worthwhile endeavor.

A bit of a digression:

On Thu, 27 Jun 2002, Derrick 'dman' Hudson wrote:

> Certainly there is value in getting off the lists ... I don't think
> "unsubscribing" will truly work.  If the spammer cared about your
> (un)subscription preferences, he wouldn't have spammed you in the
> first place.

For most "full-fledged" spammers, you're probably right.  However, there
is a grey area -- cf. my message from some days ago about well-meaning
marketers who don't recognize the downside of using "appending" to add to 
their subscriber lists.  Nearly all of those really do want to leave you
alone if you think they're spamming you, but the recipients are often so
cynical/paranoid about unsubscribe procedures that they won't even try.

So such a list would probably end up being a catalog of "white hat" and
"grey hat" organizations: those who aren't (deliberately) spamming, but
who send mail that at least sometimes "looks like" spam.

> The best way to refuse membership in the spam lists is with sa-exim :
> http://marc.merlins.org/linux/exim/sa.html With sa-exim you don't even
> accept the message in the first place.  As a result, your live address
> looks like it is dead to the sending SMTP server.  I've been using
> sa-exim for quite a while now and am very happy with it.

Using SA to reject messages at the MTA level can, I think, cause some
confusion.  Suppose you sign up for a retailer's newsletter. [*] The first
newsletter arrives, scores less than your threshold, and gets to you just
fine; your address appears good, but the next newsletter includes some
sort of promotional offer that pushes it over the threshold.  Now the
sender gets a bounce.  What's he supposed to do?  Most mailing list
software won't delete an address because of a single bounce, so he goes
ahead and sends the next newsletter.  This one is "less spammy" and gets
through, and the cycle continues.  You're giving the sender inconsistent
information.

[*] OK, maybe you never do this, but consider an end user at an ISP where
that ISP has decided to use SA for MTA-level blocking.  The end user is
likely to be confused when newsletters are delivered sporadically or when
some other mail he expected to get never appears.

Besides, the spammers who don't care about your subscription preferences
aren't all that likely to care whether your email address appears "live"  
either.

Back to Robert Strickler again:

> We would need to validate removals with non-live addresses and share the
> database of "legitimate" removals. The sharing should be able to use the
> same mechanism as the rule sharing that has been discussed on the list.

A number of things to consider:

- The validation scheme has to be clever enough to prevent spoofing.  (A 
  "non-live" address might get dropped just because it doesn't appear to
  be live, not because an unsubscribe had any real effect.)

- A listed entity has to have some sort of stability; e.g., the domain 
  name has to stay live, or some such test.

- It ought to be difficult (or somehow strongly discouraged) to use the
  list for blocking; it's supposed to be list of (relatively) good guys.

Hmm.



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Bringing you mounds of caffeinated joy.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to