Fun new policy at AOL

Speaking on Deep Background, the Press Secretary whispered:

> Shouldn't customers that purchase IP services from an ISP use the ISPs
> mail server as a smart host for outbound mail?

applying that standard just how large do you have to get before
you "graduate" to running your own smtp server. "I'm sorry we won't accept
mail from you because you're not an lir?"

Yea! I think the registry should run the mail server. That way,
there's just 3 or 4 nationwide. Makes it easier for Ashcroft
and RIAA, to boot.

And we all know how well NSI does on complex things...

This brings up a more general point about the dangers of blocking
everything under the sun. When you limit yourself to just a few
chokepoints, its easier for those who would stifle communications
to shut things down.

This is a very dangerous path to take. Not that we shouldn't consider
some sort of port restrictions to stop spam, but there are undesirable
long term effects that need to be considered. Those on the dark side
will be "considering" them, you may be sure, while licking their chops.

This brings up a more general point about the dangers of blocking
everything under the sun. When you limit yourself to just a few
chokepoints, its easier for those who would stifle communications
to shut things down.

This is a very dangerous path to take. Not that we shouldn't consider
some sort of port restrictions to stop spam, but there are undesirable
long term effects that need to be considered. Those on the dark side
will be "considering" them, you may be sure, while licking their chops.

It can be built without choke points. ISPs could form trust relationships with each other and bypass the central mail relay. AOL for example could require ISPs to meet certain criteria before they are allowed direct connections. ISPs would need to contact AOL, provide valid contact into and accept some sort of AUP (I shall not spam AOL...) and then be allowed to connect from their IPs. AOL could kick that mail server off later if they determine they are spamming.

-Matt

If you replace "AOL" with some body or set of bodies, unrelated to
(but trusted by) large numbers of networks, then you have what I regard
as the only ultimately workable solution to the present situation.

The devil is in the details - finding and trusting such bodies: however
it may be that they are already amongst us but under a different name!

In article <B9D3F155-D971-11D7-828E-000A956885D4@crocker.com>, Matthew
Crocker <matthew@crocker.com> writes

ISPs would need to contact AOL, provide valid contact into and accept some sort
of AUP (I shall not spam AOL...) and then be allowed to connect from their IPs.
AOL could kick that mail server off later if they determine they are spamming.

Next time I'm lobbying about "the cost of Spam", I'll have to remember
to add in all this activity as well as the end user perspective (and the
more traditional "we need to buy bigger servers and pipes" stuff).