News for hackers. Stuff that matters.
Re:Ask HN: Why isn't email spam solved using Proof of Work yet? by fanf2 on Friday January 08, 2021 @12:16PM (#25686978)
This question was answered in 2004 by the paper “proof of work proves not to work” https://www.cl.cam.ac.uk/~rnc1/proofwork.pdf

Abstract: ”A frequently proposed method of reducing unsolicited bulk email (“spam”) is for senders to pay for each email they send. Proof-of-work schemes avoid charging real money by requiring senders to demonstrate that they have expended processing time in solving a cryptographic puzzle. We attempt to determine how difficult that puzzle should be so as to be effective in preventing spam. We analyse this both from an economic perspective, “how can we stop it being cost-effective to send spam”, and from a security perspective, “spammers can access insecure end-user machines and will steal processing cycles to solve puzzles”. Both analyses lead to similar values of puzzle difficulty. Unfortunately, real-world data from a large ISP shows that these difficulty levels would mean that significant numbers of senders of legitimate email would be unable to continue their current levels of activity. We conclude that proof-of-work will not be a solution to the problem of spam.”

Re:Ask HN: Why isn't email spam solved using Proof of Work yet? by sean_pedersen on Friday January 08, 2021 @12:33PM (#25687221)
Thanks for the reference. But this misses out on another important tool already in use against spamming: White lists.

Yes, in theory PoW makes mass mailing very expensive and thus directly hurts spammers that are not on the common anti-spam white lists. Organizations that need to mass mail users for legitimate reasons are however most likely already on anti-spam white lists and thus need not to do a very hard PoW hash or none at all as they are already proven to not be spamming.

So this paper's conclusion is not the real deal.

Re:Ask HN: Why isn't email spam solved using Proof of Work yet? by JoeAltmaier on Friday January 08, 2021 @12:42PM (#25687346)
I imagine some inbound email could be whitelisted automatically, from some authentication tech. If I sign up for mailings, some app (email? browser) can give a one-use cert or id that can be passed back in email headers. If that company sells my email, I can block further emails from that source. It doesn't seem hard.
Re:Ask HN: Why isn't email spam solved using Proof of Work yet? by theamk on Friday January 08, 2021 @06:00PM (#25691635)
If you can get people to use centralized anti-spam white lists, you do not need proof of work at all.

But having such list will make email effectively centrally controlled. I would hope we never end up in this situation. The current system is bad, but making it centralized is even worse - just read what happens to businesses when Facebook/google bans them.

Re:Ask HN: Why isn't email spam solved using Proof of Work yet? by enchiridion on Friday January 08, 2021 @06:20PM (#25691860)
I don't think it needs to be centralized. Why not have a white list per account? When you sign up for a list or service you can add certain domains to you personal list.

Of course some of the larger services may offer a default white list for common domains.

Re:Ask HN: Why isn't email spam solved using Proof of Work yet? by theamk on Friday January 08, 2021 @06:34PM (#25692214)
So every time I type my email somewhere, I also have to go to my mail provider and pre-emptively whitelist the sender? This does not sound like a very good UX.

I suppose you can have a special system where you have a browser plugin which automatically generates some sort of subscription token and pastes it alongside email into subscription form.. but this will need cooperation from every mail-sending app, and will not handle non-web uses cases at all...

Re:Ask HN: Why isn't email spam solved using Proof of Work yet? by victor_e on Saturday January 09, 2021 @01:41PM (#25703140)
I use Hey.com which allows me to screen first time senders [1] and it works really well. This is in combination to a spam filter.

[1] https://hey.com/features/the-screener/