I’ll just pick out one particular argument, as RW touched upon the others:

| Why would you trust list B and W knowing that they can be corrupted? 

That was one specific concern in the design of dnswl.org <http://dnswl.org/>, 
which we documented eg here: https://www.dnswl.org/?page_id=23 
<https://www.dnswl.org/?page_id=23> („How is this different from other 
whitelisting services?“)

Like many other lists, the cost of running dnswl.org <http://dnswl.org/> is 
paid by receivers - those doing more than 100’000 queries per day on the 
IP-based list in our case are asked to get a subscription and to rsync the data 
locally (we may extend that to the domain-based list, but that is still in 
experimental stage anyway). Thus the commercial incentives of the organisation 
(to the degree that they would actually matter) are very much aligned with the 
receivers, basically ruling out any benefits of corruption.

Yes, about once a year there is someone claiming „i just paid a subscription, 
now list me!“. In these cases, we send them a „thanks, but no thanks“ note, 
give them a refund on the subscription, and remove their account.

— Matthias

Reply via email to