I still had the same problems others have mentioned though, where crappy registration systems were sending their confirmation mails directly from their PHP application, rather than relaying it through a smart MTA that actually understood the SMTP protocol and would do the retry.
Ultimately, too many users complained about mail delays and missing email. This is one of those scenarios where the cost of not delivering an important email may outweigh the benefits of blocking a few more invalid ones.
You're right about the prior activity for the domain, but both Blue Coat and McAfee complained based on the IP address we're using now (i.e., the EC2 address).
But my purpose in posting this is to ask: what other filtering lists are out there?
Getting ourselves off is easy now, since we are a legitimate site; the hard part is figuring out who else may be blocking us.
For myself, I definitely fall into the introvert category - I get fatigued fairly quickly after fairly common social interactions.
The problem is I think for a lot of us, our default mode of "chilling out" is spending time online browsing sites, checking email, reading the latest news. All of those activities provide the illusion of taking a break from the "real world" but I don't think they provide the respite we believe.
It's really easy to get agitated online about some silly flame war, techcrunch linkbait, or some offhand comment someone made about your project on twitter.
So I can see how a life offline, or the compromise of spending less time online, can certainly be beneficial.
I must have missed that one. Yeah, that's me. I coined "asocial" because "introverted" picked up a lot of wrong connotations (I'm not socially awkward, misanthropic, etc.), but that is definitely it.
but the original attack wouldn't have changed one bit with SSL. Peter Guttman wrote a great paper on how we defend where the attackers aren't attacking. SSL in this case would have been one such example. Of course, SSL has value in other cases (sniffing, ensuring you're talking to the right site, etc) but is no panacea.
Amex. Great customer support. They also offer buyer protection program so Amex will reimburse you if the product you bought breaks or is defective up to a certain amount.
If your card number was ever stolen because of a shoddy merchant, or if you got screwed over on delayed shipping or a broken product, Amex has your back.
I have been using amex for years now. They have the best customer service. The dispute process is really simple/easy. Whenever, I have to buy something from a place I haven't heard off or looks a little shady I use Amex.
I didn't realize this had been submitted before (by nirmal). It was hosted on a different domain in the previous submission which is why this wasn't caught as a dupe.
Anyway, you can see some of the author's comments in this thread:
http://www.policyd.org/tiki-index.php?page=Greylisting&s...
I still had the same problems others have mentioned though, where crappy registration systems were sending their confirmation mails directly from their PHP application, rather than relaying it through a smart MTA that actually understood the SMTP protocol and would do the retry.
Ultimately, too many users complained about mail delays and missing email. This is one of those scenarios where the cost of not delivering an important email may outweigh the benefits of blocking a few more invalid ones.