Re: tmda: Challenge-response is fundamentally broken (RAPNAP)

2003-09-08 Thread Craig Sanders
On Sat, Sep 06, 2003 at 11:32:04PM +1000, Russell Coker wrote: DNSBL's and spamassasin seem quite good at dealing with spam and are much less annoying. That combined with some new laws that are being enacted to combat spam should keep it to a managable level. oh, please tell me that these new

Re: tmda: Challenge-response is fundamentally broken (RAPNAP)

2003-09-06 Thread Russell Coker
On Sat, 6 Sep 2003 06:56, david nicol wrote: Unlike TMDA's distributed profusion of extended addresses, a central RAPNAP (return address, peer network address pair) database only needs to send out a challenge when you change your outgoing SMTP server. In effect, a central server

Re: tmda: Challenge-response is fundamentally broken (RAPNAP)

2003-09-06 Thread david nicol
On Sat, 2003-09-06 at 08:32, Russell Coker wrote: Here's how it works. Spammer creates account [EMAIL PROTECTED] and sends their first spam to a C-R system, when the challenge comes in they acknowledge it and from then on the C-R system does not bother them because they keep using the

Re: tmda: Challenge-response is fundamentally broken (RAPNAP)

2003-09-06 Thread Andrew Suffield
On Sat, Sep 06, 2003 at 06:02:07PM -0500, david nicol wrote: Don't hate spammers, figure out a way to bill them. They are in business, they pay for things, they expect to be billed. Everyone who has considered sender-pays agrees that it provides a better solution than legislation. Again

Re: tmda: Challenge-response is fundamentally broken (RAPNAP)

2003-09-05 Thread Russell Coker
On Thu, 4 Sep 2003 18:32, david nicol wrote: I've been trying to popularize a centralized challenge-response database since last fall. It seems to me that becoming a debian package maintainer for the software to use it would make sense. Unlike TMDA's distributed profusion of extended

Re: tmda: Challenge-response is fundamentally broken (RAPNAP)

2003-09-05 Thread david nicol
On Fri, 2003-09-05 at 00:16, Russell Coker wrote: On Thu, 4 Sep 2003 18:32, david nicol wrote: I've been trying to popularize a centralized challenge-response database since last fall. It seems to me that becoming a debian package maintainer for the software to use it would make sense.

Re: tmda: Challenge-response is fundamentally broken (RAPNAP)

2003-09-05 Thread Andrew Suffield
On Fri, Sep 05, 2003 at 03:56:16PM -0500, david nicol wrote: For challenge response to work it has to be annoying to lots of people. Anything that stops it being annoying will stop it working. That's why it is broken. Challenge-response, BY ITSELF ONLY, suffers from that problem. When

Re: tmda: Challenge-response is fundamentally broken (RAPNAP)

2003-09-04 Thread david nicol
Hello I've been trying to popularize a centralized challenge-response database since last fall. It seems to me that becoming a debian package maintainer for the software to use it would make sense. Unlike TMDA's distributed profusion of extended addresses, a central RAPNAP (return address,