On 12/12/22 8:53 PM, Murray S. Kucherawy wrote:
On Mon, Dec 12, 2022 at 12:36 PM Michael Thomas <[email protected]> wrote:
I have good reason to be suspicious. That Google was one of the
major proponents of ARC which was supposedly to deal with the
mailing list problem but all boiled down to reputation that could
already be done with plain old DKIM suggests that reputation
remains an unsolved problem. Maybe it is just one side of the
company not knowing what the other side knows, but I find that
rather unlikely. So there is a contradiction somewhere here from
where I sit.
I would be unsurprised if the consensus is indeed that reputation is
an unsolved problem. There's no DKIM-based public reputation service
that I know of; it remains the secret sauce of large operators with
the resources to gather enough data to compute such a thing, and they
have little incentive to share. I did enough experimentation years
ago to conclude that such a thing would be possible to build, but the
need for reliable data sources and the upkeep effort were both
significant.
Yeah, I would be very happy to be proven wrong, but I have to remain
skeptical in the mean time. DKIM was always a Preparation H of
anti-spam: it helps, but doesn't cure (thank you Dave Oran). I'm at
peace with that, and have been for a long time.
Mike
_______________________________________________
Ietf-dkim mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/ietf-dkim
