Discussion about this post

User's avatar
Bruce Adelstein's avatar

There's a clever spam block that I use called greylisting. Details here:

https://en.wikipedia.org/wiki/Greylisting_(email)

The idea is that spammers often use fake e-mail addresses, fake domains, etc. When the mail server receives an e-mail from a user for the first time, it delays accepting the e-mail and sends back a code to the server the e-mail is ostensibly from, saying essentially "I didn't get the e-mail. Sorry. Please try resending."

Real e-mail servers have this protection built in, and they just resend. Once the e-mail has been properly resent, the greylist program stores the information in a database and lets future e-mails through.

But if the spammer is spoofing the domain of the sender, the ostensible mail server will say "What? I didn't send that e-mail. I don't know what you are talking about." And then the spam is never delivered.

So this is not quite asking a question that legitimate recipients would know, but it is asking a question of the ostensible sender's email server that a real server would know.

The only downside is a delay in not getting an initial e-mail from someone. This might be several minutes or hours until it is resent. And if course it does not filter out all spam. But it filters out a lot.

Expand full comment
Philalethes's avatar

I find the comments section of Substack a good surrogate for conversation with ‘interesting strangers’. Maybe one could build on it.

Expand full comment
31 more comments...

No posts