Re: Incoming SMTP in the year 2017 and absence of DKIM

[Grant Taylor via NANOG <nanog () nanog org>]

On 11/30/2017 12:16 PM, Owen DeLong wrote:
> it’s a rather large PITA for a small site with an admin that needs to count on 
> most things running on autopilot most of the time in order to survive.

I have to disagree with that.

I've been running SpamAssassin for > 15 years and have found it to be 
mostly trouble free.  -  I have cron jobs update it's files and rely on 
milters to accept / tag / reject messages.  -  I spend very little time 
caring for / feeding SpamAssassin.  Probably < 5 minutes a month.)

Sure, I occasionally fiddle with things, but that's because I want to, 
not because I need to.

> So, while it might be a higher-quality solution, I’d argue that it’s not completely 
> “better” in that any autopilotable configuration of it involves a high degree of 
> false negatives or an unacceptable level of false positives.

I've had fairly good luck with autopilot.  I also don't see many false 
negatives.  Nor do people report false positives to me.  (Granted, I tag 
at 5 and reject at 15.)

> People who want to be malicious are usually less willing to do so if they know that
> they will be identified, so actually, it does help.

Agreed.



--
Grant. . . .
unix || die

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature