cryptoanarchy.wiki

Arise, you have nothing to lose but your barbed wire fences!

1997-12-13 - Re: remailer hashcash spam prevention

Header Data

From: Steve Schear <schear@lvdi.net>
To: Adam Back <aba@dcs.ex.ac.uk>
Message Hash: 4e2c1bcbd8ce859f454922715082bd63b5d563f1aa65d0c8ad8f2d4c54e7c91f
Message ID: <v03102800b0b87ebad87a@[208.129.55.202]>
Reply To: <3.0.3.32.19971212234515.006a79a0@mail.atl.bellsouth.net>
UTC Datetime: 1997-12-13 18:38:23 UTC
Raw Date: Sun, 14 Dec 1997 02:38:23 +0800

Raw message

From: Steve Schear <schear@lvdi.net>
Date: Sun, 14 Dec 1997 02:38:23 +0800
To: Adam Back <aba@dcs.ex.ac.uk>
Subject: Re: remailer hashcash spam prevention
In-Reply-To: <3.0.3.32.19971212234515.006a79a0@mail.atl.bellsouth.net>
Message-ID: <v03102800b0b87ebad87a@[208.129.55.202]>
MIME-Version: 1.0
Content-Type: text/plain



I disagree that the best way to implement hashcash is solely via the SMTP mechanism.  

Almost any efficient hashcash mechanism will require some sort of history file, or "invited list," to allow mail lists and those we have corresponded with to continue to do so w/i having to supply hashcash each time.  This list contains information which might have privacy implications and so should not be stored at the ISP, which can be forced to reveal such info w/o the knowledge of the client.

If 'open' list policies were changed so that anyone could post if they supplied enough hashcash for each mailing list recipient for their first 1 or 2 posts, and thereafter no longer needed to supply hashcash (sort of minimum reputation capital), it might eliminate hit-and-run or throw-away account SPAMers without offering too high a hurdle to new or infrequent posters.

Since most popular email clients allow plug-ins (e.g. Eudora) or extensions via Java/ActiveX, providing hashcash functionality via a plug-in and the java generators you propose would provide a simple mechanism to test its effectiveness w/o needing to involve the IETF.  The shortcoming of a plug-in approach is that few newbies will know of it or install it and will therefore have to wait till its built into the new release of whatever client they use or until some or all of the features are supplied by their ISP, allowing those calling regulation to continue to blow their horns.  However, if after a successful cypherpunk beta we could get the major email client companies (Netscape, M$ and Qualcomm) to include our plug-ins with all their new updates and offer them for free download from their Web sites, it could quickly steal the CAUCE folk's thunder.

--Steve

Thread