Re: [exim] support for domainkeys

On Thu, Sep 23, 2004 at 04:24:25PM +0100, Matt wrote:

> > Nobody has to buy a SSL cert if they dont want to. They simply use
> > their ISP's mail server, which is almost assuredly a better choice
> > anyway for most smaller organizations. If an organization, for whatever
> > reason, wants to run their own mail server, then they simply make a
> > cost/benefit decision to see whether it's worth the price to take on the
> > responsibility of connecting to the public mail infrastructure.
>
> That is complete and utter bumf. How is using an ISP's mailserver going
> to save money for smaller businesses. Some ISP's, (and I don't know
> whether this is U.K specific), charge an arm and a leg if you want to use
> your own domain name on outgoing mail. Businesses get taken for a ride by
> some ISP's.

Then purchase SMTP transport service from an ISP that has better pricing.
The beauty of SMTP service is that it is not bound to the ISP you
use for connectivity. Submission service can be purchased from anyone,
and most assuredly at flat rates in the United States.

> > It's natural for people to object to fee-based certification or having
> > registration authorities, but this problem has to be solved and people
> > need to realize that in the "real world", it will be the ONLY effective
> > way to eventually solve this problem.
>
> That's because they cost an arm and a leg, and generally achieve zilch.

Not so. Certification can at least determine legitimacy of physical
addresses, names and proper business licensing for the purpose of
legal notifications. It can also be used for revocation of
illegitimate registrations.

> > Nobody would be forced to buy a cert for their mail server, but if they
> > want to communicate with the participating ISPs, they would have to
> > pay to play.
>
> Again, complete and utter bumf. It may create a 'boys club' of mail
> systems interacting merrily with each other, but that definitely is not
> living in the 'real world', as you say.

Exactly. A boys-club is exactly what is needed. The alternative is
anarchy, which is exactly what you have today. A tangled mess of
servers with absolutely no authoritative certification of legitimacy.

--
Dean Brooks
dean@???