1. Reputation Discussion Panels: Seeking a Common Understanding Dave Crocker Brandenburg Internet Working bbiw.net MAAWG / S.F. 2006 Dave Crocker Brandenburg Internet Working bbiw.net MAAWG / S.F. 2006

2. 2 2 D. CrockerApricot 2006 / Trust Overlay Adding a “Trust Overlay” :Sender/Operator Assessment Service Reputation:Sender/Operator Assessment Service Administrative Domain ok not ok MessageMessage Filter ID / Signer Evaluation Other Tests Mailbox Reputation: Internal Lists ID / Signature Verification

3. 3 3 D. CrockerApricot 2006 / Trust Overlay Negotiating “What is Spam?” (Per message, per author, per operator) Originators  Sent by other people  Sent without an unsubscribe  Violates CAN SPAM  Porn  For “not-real” products Reputation Services  Sent to scraped lists  Not properly bounce handled  Users complain about  Sent without a valid unsubscribe  Violates CAN SPAM Originators  Sent by other people  Sent without an unsubscribe  Violates CAN SPAM  Porn  For “not-real” products Reputation Services  Sent to scraped lists  Not properly bounce handled  Users complain about  Sent without a valid unsubscribe  Violates CAN SPAM Recipients  Unsolicited bulk email  Generates users complaints  Mail I don’t want  Mail I didn’t ask for  Has spam “characteristics”  Hits non-existent users  “Bad” URLs that users have complained about  Invalid HELOs, HTML, etc / Apologies to Laura Atkins

4. 4 4 D. CrockerApricot 2006 / Trust Overlay Panel #1: Receiver-side  Charles Stiles / AOL  Jamie de Guerre / Cloudmark  Miles Libbey / Yahoo!  April Lorenzen / Mailcruncher  Charles Stiles / AOL  Jamie de Guerre / Cloudmark  Miles Libbey / Yahoo!  April Lorenzen / Mailcruncher

5. 5 5 D. CrockerApricot 2006 / Trust Overlay Priming the Pump: Some Questions  Users/Operators  What do they need and want?  What do they NOT want?  Where to put controls  How much reliance on third-party services?  How much with the receiving operator?  How much with the end user?  Timing  What is needed now?  What might be needed long-term ?  Users/Operators  What do they need and want?  What do they NOT want?  Where to put controls  How much reliance on third-party services?  How much with the receiving operator?  How much with the end user?  Timing  What is needed now?  What might be needed long-term ?

6. 6 6 D. CrockerApricot 2006 / Trust Overlay Panel #2: Receiver-Side  Tara Natanson / Constant Contact  Jordan Cohen / Epsilon Interactive  Richard Gingras / Goodmail Systems  Doug Warren / Habeas  Patrick Peterson / IronPort  Anne Mitchell / ISIPP  George Bilbrey / Return Path  Tara Natanson / Constant Contact  Jordan Cohen / Epsilon Interactive  Richard Gingras / Goodmail Systems  Doug Warren / Habeas  Patrick Peterson / IronPort  Anne Mitchell / ISIPP  George Bilbrey / Return Path