[anti-abuse-wg] Hold time for abused address space - DNSChanger IP's reallocated

 >Yet that definition is good enough to be used by the community at large,

What I am saying is that definition is not really used in practice. A 
recent e-mail was sent to this list that contained a different charter 
set which i think most people would define as "spam", Unwanted e-mail, 
etc.   However, I have no knowledge that it was sent in "bulk" and 
because it had an alternate charter set I don't even know if it was a 
solicitation.  The message does not fit the definition yet I would 
define it as "spam".  once you look at filtering algorithms you can see 
how tricky it is and no spam filters works 100% correctly and the 
parameters change all the time based on conditions.

If you start accusing people of something without having a clear 
definition of what they did then you are running into trouble. Think of 
credit reporting agencies and all the associated problems if such a 
database is not run correctly.  they don't say "this is a list of 
deadbeats" they say something like "This person is delinquent on their 
electric bill by 90 days."  If the person pays the electric bill then 
they are removed from the list.  If you just say "the person is a 
deadbeat" then there is no clear definition of what the person did to 
get on the list and the person does not know what to do to get off the 
list.  This is how most blacklists are run now.

Comcast is a good example.  once when they incorrectly blocked ports on 
my connection.  When I asked them why they told me they were not to tell 
me the reason ... but they added if I did it gain I would be permanently 
blocked!  These are the kind of crazy statements you get from some 
blacklist operators who think their security issues trump every other 
issue in the world.