On Wed, Jan 14, 2004 at 05:26:40 +0000, John Ruttenberg wrote:
> I sent this to Habeas Technical Support.  But I think I'll get a better
> response on this mailing list.  This seems like an obvious idea.  There must
> be something wrong with it.  But what?
> 
>     Here is a technical suggestion.  I think your business plan works by using
>     legal action against violators of your copyrighted haiku.  But it is
>     technically easy for spammers to include the habeas watermark and hard for
>     you to find and prosecute them.  The recent flood of habeas marked drug
>     spam is an example of this.
> 
>     Why not change the equation in your favor?  You can act as a clearing
>     house for public/private key paris.  When people sign up with you and get
>     a license, they also get a private key for use in signing their email.
>     You make the corresponding public keys available over the network.
>     Antispam software verifies the signatures against the keys you provide.
>     If you find a key is abused you not only go after the abuser legally, but
>     also withdraw the public key from your database so signatures made with
>     the corresponding private key can no longer be verified.
> 
>     There it is.  Pretty easy to implement and I think it will add value to
>     your business plan by making your certification more trustworthy in the
>     short run as well as the long run.

this sounds like a heavily commercialized version of pgp/gpg. It would be just as
easy to adapt MTAs to filter spam based on pgp keys (i'm not suggesting we do).

John, if I have lost something in transit, and got the wrong tree altogether, I
apologise :)

--
Mat Harris

Attachment: pgp00000.pgp
Description: PGP signature

Reply via email to