32 ms·
That actually sounds like a really good idea. This is already implemented in the physical world (in a much less efficient way) in the form of “no spam” stickers
by Swenrekcah 3y ago
That actually sounds like a really good idea.
This is already implemented in the physical world (in a much less efficient way) in the form of “no spam” stickers and registrations.
Is there a reason other than inertia for why it hasn’t been implemented?
- codedokode 3y agoISPs do not want to spend money for fighting against criminals.
- Swenrekcah 3y agoThat doesn’t sound convincing to me. I mean I understand they don’t want to spend money but if cost is the only barrier it seems like that could be overcome somehow by interested parties.
- bombcar 3y agoIt's not the costs, it's that some ISPs like getting money from spammers and criminals, and carefully look the other way. And the other ISPs like getting paid for DDoS mitigation, so they also look the other way. There's no money to be made fixing the underlying problem.
- bombcar 3y agoThe main problem is how do you authenticate the request as being legitimate? It's already possible to spoof headers and "FROM-IP" (in fact, major DDoS attacks use just this as a replay attack, spoof a DNS request as coming from 1.1.1.1 and get a much larger response sent TO 1.1.1.1 from wherever).
- codedokode 3y agoYou can send back a reply with a token to confirm ban.