4 ms·
you could argue dmarc, dkim, and SPF were all invented as barriers to entry for small mail servers as the majority of internet SPF is permissive and the majorit
by nimbius 5y ago
you could argue dmarc, dkim, and SPF were all invented as barriers to entry for small mail servers as the majority of internet SPF is permissive and the majority of DKIM is misconfigured. imo, senderbase and other reputation/policy proprietary shit-lists used by anyone with a Symantec or Cisco email product only served to convert the unwashed to a corporate license as most of these mechanical turks just paid the same spammers by night to show up in a delhi office complex day job to identify their own campaigns. DMARC and DKIM/SPF just wrapped email in a mandatory layer of arbitrary complexity to "solve" a problem that RBL's had largely managed to tackle as an independent entity.
that they exist in part to force the hand of small companies and users to simply submit to a big player for their email is something i have long considered.
DISCLOSURE: I proudly run my own email server.
- evandwight 5y agoHow hard is it to actually get mail delivered? I have the dumb idea of trying to make SMTP as cheap as http. Make spam expensive using proof of stake. I find it frustrating I have to pay Amazon to send text for me. I was going to setup my own SMTP server but it seemed like too much work.
- hardwaresofton 5y agoCheck out the following pieces of software — it’s never been easier! Maddy (https://maddy.email/ https://maddy.email/) Postal (https://docs.postalserver.io/ https://docs.postalserver.io/) Chasquid (https://blitiri.com.ar/p/chasquid/ https://blitiri.com.ar/p/chasquid/)
- toomanybeersies 5y ago> Make spam expensive using proof of stake That's already a thing. Hashcash [1], the PoW algorithm underpinning Bitcoin, was originally conceived as a method to prevent email spam. [1] https://en.wikipedia.org/wiki/Hashcash https://en.wikipedia.org/wiki/Hashcash
- invalidator 5y agoSPF/DKIM aren't meant to solve spam directly. They are aimed at sender forgery. The real benefit of SPF is for outgoing mail. People no longer forge my domains. It stops backscatter. It has almost eliminated the mistaken spam reports to my ISP by people who don't understand mail headers.
- Seirdy 5y agoHuh? SPF, DKIM, and DMARC along with mta-sts/DANE require running some scripts and entering DNS records. If you are already capable of hosting a mail server at your own domain, then this should be rather straightforward. How is this a "barrier to entry"?
- hkt 5y agoIt is surprisingly hard to get the cryptography right, and the cost of misconfigured DKIM in particular is nothing gets delivered to most providers.
- hkt 5y agoIt is a pretty solid example of market power at play - nobody but a big player would have the scale to force a change like that.