2 ms·

Nothing new under the sun, I guess :P That's interesting, though. The attack would require the collusion of many parties. That's very feasible if you consider

Nothing new under the sun, I guess :P That's interesting, though. The attack would require the collusion of many parties. That's very feasible if you consider how easy it is to create email addresses today. One could imagine the system requires a one-time registration fee orders of magnitude greater than the spam penalty. That wouldn't be a solution on it's own, but pair that with delays in applying penalties and an arbitrage system and I think we're looking at an increasingly stable system but with ballooning complexity. Don't know if it's practical, and as you've mentioned I'm sure many people have gone down that road, but I'll be daydreaming about it for the next little bit :)

duskwuff 5y ago
> The attack would require the collusion of many parties. Not sure what parties you have in mind here. As far as I'm aware, it would only require the involvement of a single party entering a bunch of fake or scraped email addresses into a registration form. The malicious party wouldn't receive any benefit, but the web site operator would have their funds drained. > One could imagine the system requires a one-time registration fee orders of magnitude greater than the spam penalty. Requiring every online service which sends emails to charge users to register would be disastrous. It would make entire classes of web sites (like hobbyist forums, or even free trials of paid services) infeasible to operate.