Internet and e-mail policy and practice
including Notes on Internet E-mail


2010
Months
Aug

Click the comments link on any story to see comments or add your own.


Subscribe to this blog


RSS feed


Home :: Email


09 Aug 2010

Google and Verizon offer a gift to spammers Email

Earlier today, Google and Verizon offered a widely publicized "Proposal for an Open Internet." There's been extensive comment with lots of reasons not to like it, but one I haven't seen is that the proposal would make it much harder to filter so-called "mainsleaze" spam.

The Framework Proposal says:

In providing broadband Internet access service, a provider would be prohibited from engaging in undue discrimination against any lawful Internet content, application, or service in a manner that causes meaningful harm to competition or to users. Prioritization of Internet traffic would be presumed inconsistent with the non-discrimination standard, but the presumption could be rebutted.

The problem is that under the pitifully weak CAN-SPAM law, a lot of spam is entirely legal. Under CAN-SPAM, if an e-mailed ad isn't fraudulent, has a way to unsubscribe, and includes the postal address of the advertiser, it's legal, whether you've asked for it or not. You can tell them to stop, in which case they get 10 days to stop spamming you. But until you tell each individual spammer to stop, since they're sending "lawful Internet content", the ISP is supposed to deliver it.

Google's intention is probably not to make it a field day for spam, since a subsequent section says:

Reasonable network management includes any technically sound practice: to ... address traffic that is unwanted by or harmful to users, the provider's network, or the Internet; to ensure service quality to a subscriber; to provide services or capabilities consistent with a consumer's choices;

A later section says that in case of irreconcilable disagreements, the FCC is the referee. That bit about unwanted or harmful to users is obviously intended to refer to spam filtering, but it doesn't solve the problem.

The business model of the Internet has until now been what I've called Mutually Assured Destruction. Networks connect to each other because they think it will be to their mutual benefit to do so. When large networks connect, it's typically as peers, passing traffic back and forth without payment, other than perhaps sharing the physical cost of the connection point. If one network sends unwanted traffic to the other, the recipient network can refuse or discard the traffic without notice. This means that networks are, out of self-interest, polite to each other in what they do, since impolite networks can be and occasionally are disconnected without notice. When that happens, it's up to the offending network to solve the problem and persuade the other network to resume delivering traffic. This is the essence of the way that spam filtering works; recipient ISPs block or drop the spam, and senders try with more or less success to persude them to resume delivering it.

But the Google-Verizon plan flips this on its head. Now, if traffic is "lawful", the rules say the recipient network has to deliver it unless they can show that it's "unwanted" by their users. If I were a spammer sending legal spam, perhaps like this guy, as soon as my mail was blocked I would rush to the FCC and complain that the nasty ISP is blocking my perfectly legal spam. Even if the ISP can show that they have users complaining about his stuff, so the network management exception applies, the FCC, being a government agency, is likely to tell the ISP not to block anything until they rule on his complaint, which could easily take months, if not years, during which time the spam continues to flow.

Although network neutrality sounds like a good idea, it's not, because it breaks the underlying model of the way the Internet works. It's certainly true that in most parts of the country, there's only one or two viable broadband ISPs, the phone company and the cable company, and they can't be trusted to run the network the way their users want. But the right way to address the excessive market power isn't to regulate the ISPs, it's for the FCC to put the rules back the way they were in the early 1990s, so telcos and, ideally, cable companies have to provide the underlying connections to any ISP on the same terms, so we have enough competing ISPs that if you don't like one, you can just switch to another. This isn't a pipe dream -- countries including the UK have done exactly that, with the result that their residents have a wide range of ISPs, who provide faster service at lower prices than we get in the US.

But good luck explaining that to your Congressman.


posted at: 23:55 :: permanent link to this entry :: 1 comments
posted at: 23:55 :: permanent link to this entry :: 1 comments

comments...        (Jump to the end to add your own comment)


Hmm. I see three different ways of looking at defining what's now called Net Neutrality. First, you have the service provider/end user connection. There, I think the intent is to ensure that the traffic is delivered agnostically, so a user is not penalized in throughput or financially by the type of traffic he/she desires. Even if some mechanism is put in place, encryption can easily bypass it anyways.

Then there's the service provider peering. This is where most of the "Mutually Assured Destruction" comes into play. The peers have generally played nice and policed themselves pretty well.

Last is the content provider/service provider. I have started to see instances where good old capitalism is coming into play. For instance, ESPN now is requiring that providers pay them in order for their customers to access content. So far it has been spotty, but it's only a matter of time until the impact becomes widespread.

Net neutrality really means laissez faire, I think.

(by Jason Gardiner 10 Aug 2010 10:12)


Add your comment...

Note: all comments require an email address to send a confirmation to verify that it was posted by a person and not a spambot. The comment won't be visible until you click the link in the confirmation. Unless you check the box below, which almost nobody does, your email won't be displayed, and I won't use it for other purposes.

 
Name:
Email: you@wherever (required, for confirmation)
Title: (optional)
Comments:
Show my Email address
Save my Name and Email for next time

Topics


My other sites

Who is this guy?

Airline ticket info

Taughannock Networks

Other blogs

CAUCE
It turns out you don’t need a license to hunt for spam.
27 days ago

A keen grasp of the obvious
Italian Apple Cake
585 days ago

Related sites

Coalition Against Unsolicited Commercial E-mail

Network Abuse Clearinghouse



© 2005-2020 John R. Levine.
CAN SPAM address harvesting notice: the operator of this website will not give, sell, or otherwise transfer addresses maintained by this website to any other party for the purposes of initiating, or enabling others to initiate, electronic mail messages.