CAcert System Admins discussion list

[samj AT samj.net]

Don't spool probes, for example by poking them into the recipient's MX
in PHP. Try to mitigate the dns risks too, for example by querying
without caching from multiple data centers and comparing results. Also
secure the probes by encrypting them to the requestor so as they
cannot be responded to eg by attackers, spam filters, etc.

Possibly also delay the probes a random amount of time to raise the
bar for attackers who only have brief access to the victim's mailbox.

Sufficient you think ian? I dislike greylisting too... and I'm
unconvinced it is as industry standard as claimed... my mail arrives
clean via postini almost instantaneously.

Sam

On 8/11/08, IanG 
<iang AT cacert.org>
 wrote:
> Teus Hagen wrote:
>> Gentlemen,
>>
>
>> On 10/08/08 19:56, Philipp Gühring wrote:
>>> Hi Ian,
>>>
>>>
>>>> OK.  Do we have any documentation on this?  Is this an
>>>> agreement between Oophaga and Tunix?  Does CAcert feel that
>>>> this is a "good thing?"
>>>>
>>> Greylisting is currently industry standard practice. I personally dislike
>>> it
>
>
> Philipp, I am seeing more and more that emails that you sent
> do not arrive to me, and turn up later in quotes.
>
> This one however is the first I've seen that said "Hi Ian"
> and went to Teus (only?) so presumably it was meant to go to
>   me????
>
> Is anyone else seeing this?  Is this philipplisting or
> ianglisting?
>
> iang
> _______________________________________________
> CAcert-sysadm mailing list
> CAcert-sysadm AT lists.cacert.org
> https://lists.cacert.org/cgi-bin/mailman/listinfo/cacert-sysadm
>