Back

@aral Should fix the form against greylisting.

@muppeth Going to look into it today. Greylisting is such an ineffective policy, it’s amazing that folks still use it. But yes, from initial reports it appears a few places still do :)

@aral Actually it blocks ton of potential spam. Sure it has flaws (specially when sending one time passwords/tokens etc from not frequently used domains) but the amount of shit that gets blocked is I think worth it, or at least it was. I should do some stats on that to see if it’s still the case, but last time I checked it was pretty obvious lot of annoying spam was out the window before hitting the server.

@muppeth I think the key word here is *was*. Spammers caught on quickly that all they needed to do was retry after a while. It wasn’t much in terms of “proof of work”. Today, from the research I’ve done, it’s as effective to use other anti-spam techniques. And since folks like gmail send email from lots of separate IPs it means transactional emails can be delayed for hours. So, in a nutshell: doesn’t really affect modern spammers, makes life harder for everyone else :)