[anti-abuse-wg] Whois database verification

In message <trinity-3126151d-dac9-44e0-9cfc-1b10fd3b8725-1446576476140 at 3capp-gm
x-bs01>, "Karl-Josef Ziegler" <kjz at gmx.net> wrote:

>Several years ago I already got a postcard with a verification code to prove
>that my postal address is correct. And this was not a paid service but a large 
>freemailer with thousands of customers. So, no it's not rocket science and
>yes it was already done this way in large quantities (by another service
>provider).

I was going to mention this possibility, i.e. of doing real verification
of snail-mail addresses, but I decided not to.  Given some of the
reactions to even just phone verification, it seemed to me predictable
that there would be much public gnashing of teeth and tearing of hair
in response to even the suggestion.  (That would predictably be
followed by fervent objections of the basis of cost, which would
themselves just as predictably be followed by objections on the
basis of "privacy" and/or unworkability.  I feel sure that someone
would say that if the magic cookies needed to complete the validation
were printed on the OUTSIDE of the postcards, then any mailman or
anyone else who happened to see the postcard in transit could then
maliciously, and with malice aforethought, sadistically and
surrepitiously complete the validations on behalf of the actual
parties to whom the postcards were addressed.  The fact that no
apparent benefit would actually accrue to any man-in-the-middle who
actually did this would probably get lost in the ensuing kerfuffle.)

For now, I personally would be happy if each snail-mail address was
just simply checked to make sure that it refers to some address on
this planet.


Regards,
rfg