Re: [IETF-PKIX] Certificate Directories and Spam

[Andrew Csinger <csinger@xxxxxxxxxxxxxx>]

Although somewhat off-topic, I think it's important to note in passing that
PKI is ultimately the solution to the problem of SPAM, and is not likely
to be any part of the cause. It will be important, perhaps, to keep this
vision in front of us as we build the market for PKI, to avoid
mis-perceptions in the short run. As you point out, issues like this could
slow down the penetration of PKI technologies if not handled with delicacy.

Andrew


At 10:22 12/30/97 -0500, Hal Lockhart wrote:
>At 01:30 PM 12/29/97 -0500, you wrote:
>>>It seems to me that publicly accessible directories with certificates in
>>>them, especially those with email addresses conveniently located in the
>>>subjectAltName field will provide an irresistible source of targets to
>>>Spammers. The reason for raising this issue on this list, is that it seems
>>>to me that if this does happen it could greatly retard the deployment and
>>>acceptance of an Internet PKI.
...
>>I think that the solution to the spam problem is likely to be legislative.
...
>I am afraid you are dreaming, I see too many practical problems with any
>kind of legal approach to work. The parallel between email and fax is very
>weak. Spam will only stop if it stops working or becomes too expensive.
...
>I would like to hear other opinions. Does anyone else think this problem
>may discourage people allowing their certs to be publicly posted? Have the
>email or directory working groups discussed this issue?
>
>Hal
>
>=================================================================
>Harold W. Lockhart Jr. Platinum Solutions Inc.
>Chief Technical Architect 8 New England Executive Park
>Email: hal@platsol.com Burlington, MA 01803 USA
>Voice: (781)273-6406 Fax: (781)229-2969
>=================================================================


--------------------------------------------------------------
Andrew Csinger, Director Xcert Software Inc.
1001-701 West Georgia Street P.O. Box 10145, Pacific Centre
Vancouver, B.C. Canada V7Y 1C6
tel: 1-604-640-6210 fax: 1-604-640-6220
http://www.xcert.com email: csinger@xcert.com
**** Internet Security Technologies ****
"Every information object known to modern man is a candidate
for PKI-based ACL" - Young Etheridge
--------------------------------------------------------------