Re: [IETF-PKIX] Certificate Directories and Spam

[Phillip M Hallam-Baker <pbaker@xxxxxxxxxxxx>]

>>I don't think this is very important however since there are already many
>>ways for a spammer to get addresses, USEnet, mailing lists etc. 10 million
>>addresses can be had for fifty bucks.
>
>This is like saying "bread comes from the supermarket."  The people selling
>lists need a source.


Unfortunately USEnet is simply too rich a source.

Most folks with X509 certs will be making them available through
LDAP or some Web dialogue. Folk could try to download the whole
directory but it would take them rather longer than they might
expect... I suspect most other companies would employ a similar
scheme.


>I am afraid you are dreaming, I see too many practical problems with any
>kind of legal approach to work.  The parallel between email and fax is very
>weak.  Spam will only stop if it stops working or becomes too expensive.


You think that the unworkability of a legislative scheme has some
effect on the readiness of the US congress to impose it?

Its hard to think of a less popular group whose political contributions
are dispensable.

        Phill