[Pink2DS]

My Fedi account gets more spam than my email does at this point (thanks to all the brutal postfix milters I've got on). And if we broaden it to not just unsolicited commercial email but also include outright jerks, then it's even more.

Email has spent a lot of effort on trying to implement a world-writable inbox and I'm really impressed with what they've got, with DMARC, DKIM, SPF and such.

But just to devil's advocate for Fedi for three seconds: one of the main drivers of spam was spoofing (and unsecured SMTP relays) and that's something the HTTP signatures in ActivityPub curbs.

The big fear I have with Fedi is a "domain mill", a harassment (or unsolicited commercial promotion) site that can automatically register thousands of domains and use those to set up an overwhelming amount of spamming and harassing instances.

[apitman]

You can mitigate that somewhat by blocking entire apex domains (public suffix list would likely be helpful here), but I think the root problem is allowing anyone to say whatever they want to anyone else in a fairly anonymous manner, and I just don't think that's a scalable concept.