Re: Slashing stats

From: Murray S. Kucherawy <msk_at_blackops.org>
Date: Wed, 7 Sep 2011 23:29:52 -0700 (PDT)

On Wed, 7 Sep 2011, SM wrote:
> Wouldn't it be better to keep the mailing_list data?

I don't think so. How would it affect your use of the signature in
computing reputation?

My theory is that any message in the DKIM world arrives with a set of
valid signatures on it. That set might be empty. Effectively, a valid
signature is a stamp on the message that means "This message was handled
by <d= domain>". It's that stamp that can be used to develop reputation;
eventually your domain's stamp is tracked as being associated with spammy
content or legit content depending on how tight you are with what passes
through it. It doesn't necessarily mean that domain sent or authorized
the message, but merely that it handled the message. (For some domains
you specifically trust, you could ascribe more meaning to it than that,
but this is the lowest common denominator.)

The fact that the message arrives bearing one of the common header fields
identifying list traffic doesn't seem to matter in a model like that.

Thoughts?

-MSK
Received on Thu Sep 08 2011 - 06:30:09 PST