[170991] in North American Network Operators' Group
Re: DMARC -> CERT?
daemon@ATHENA.MIT.EDU (Leo Bicknell)
Mon Apr 14 17:47:34 2014
From: Leo Bicknell <bicknell@ufp.org>
In-Reply-To: <20140414205831.GA14434@gsp.org>
Date: Mon, 14 Apr 2014 16:45:09 -0500
To: Rich Kulawiec <rsk@gsp.org>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--Apple-Mail=_133138B4-03EC-43CF-9A5F-49496EE6A881
Content-Transfer-Encoding: 7bit
Content-Type: text/plain;
charset=us-ascii
On Apr 14, 2014, at 3:58 PM, Rich Kulawiec <rsk@gsp.org> wrote:
> As I've said many times, email forgery is not the problem. It's a symptom
> of the problem, and the problem is "rotten underlying security" coupled
> with "negligent and incompetent operational practice". But fixing that
> is hard, and nobody -- not Yahoo and not anybody else either -- wants
> to tackle it. It's much easier to roll out stuff like this and pretend
> that it works and write a press release and declare success.
I think you're on the right track, but still suggesting their is a
technical solution. I submit there is not.
There is no car alarm that prevents all car thefts, no door lock that
prevents all burglaries. No trigger lock that prevents all gun deaths,
no lane departure system that prevents all car crashes.
Spam cannot, and will never be solved by technological measures alone.
They can help reduce the levels in some cases, or "squeeze the balloon"
and move the spam to some other form.
Ultimately the way to reduce spam is to catch spammers, prosecute them,
and put them in prison. The way we keep all of those other crimes low
is primarily by enforcement; making the punishment not worth the crime.
With spam, the chance that a spammer will be punished is infinitesimal.
There are hundreds, or thousands, or tens of thousands of spammers for
every one that is put into jail.
If we'd put even 1% of the effort that's been thrown at technical measures
over the years into better laws, tools for law enforcement, and helping
them build cases we'd be several orders of magnitude better off than
technological solutions that are little more than wack-a-mole.
--
Leo Bicknell - bicknell@ufp.org - CCIE 3440
PGP keys at http://www.ufp.org/~bicknell/
--Apple-Mail=_133138B4-03EC-43CF-9A5F-49496EE6A881
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename=signature.asc
Content-Type: application/pgp-signature;
name=signature.asc
Content-Description: Message signed with OpenPGP using GPGMail
-----BEGIN PGP SIGNATURE-----
iQIVAwUBU0xW5rN3O8aJIdTMAQLSBw/+KKCnQ3Lj7GXrpC7Yw5KrCcrKu6EmN8sv
PS5fJDT+NrfW5XUbqAGwsIUDXvqZJ/pN59TJp8lwDKgOefNkzCY0iuV3Bov7v+PN
3+vPGGs4f2WTJeGTC5u9z49bRBGbm9I8zK5FB5RdV4KstHqAydDl7uPPnkH/z/eh
KCVb2nc/HOJ6jH0noZ2qMHdIbZOelxFuSRuz2pqae0qQfY2wherzVZJDTh07pnqE
SsHdHq2t9BBhAm3VULlWyF1eEGhbkCxaMUAv0I5T5BerrfRI/ZphnqrOvUL/HBEX
xQyrpf8ccvnj+OkQTtjYKXyxmujm/FJ0yAKANQjFvo1U6wJLIGPAdIFLzy+45M4H
whMp+8MiI/3dJoElQgRfxPIsSU8jDIJRT+lwsKfyabFRf8y6hjeABH1Sw8VRNPVb
Mgv65t/4ZMVQnVP82b0+rDCrB3xDLrVqZKwTkTBojkdDYt+eMHLuCgh+ONkXKJsT
73z5ha6OuTqqgBjnCBSGIXHYEgzigK7v2cOs8sgafdKbpMCH0KxYPNtWNpbChSGu
2ZrtqWVtfc27xpuLXzPcPZ7Z+BMIfgTSy73DhN1sDLx9+cBuIguCgKdj476IvCks
x2Gog0mkjaG9NAWlizfBqSM5SJLIMa1FuR+xLtbYqTE1mF+g4L3Gu5JY0PYStwAb
UO6DQGQZ3CQ=
=Y6xS
-----END PGP SIGNATURE-----
--Apple-Mail=_133138B4-03EC-43CF-9A5F-49496EE6A881--
