The encyclopedia · R&D & Science · Technical decision · 1997-2002
Hashcash priced every email with a few seconds of CPU work
Adam Back's proof-of-work stamp made spam cost real compute per message — and later became the engine of Bitcoin mining.
Adam Back
the move
By the late 1990s email spam had a fundamental economic problem: sending a message cost the sender almost nothing, while every recipient and filter paid for it. Adam Back proposed hashcash in May 1997 as a way to make sending cost a little real work — the first practical proof-of-work for stopping abuse of unmetered internet resources.
The mechanism is a hash puzzle. The sender constructs a header, appends a counter, and hashes it repeatedly with SHA-1 until the digest begins with a required number of zero bits. Twenty zero bits means about one chance in a million per try, so the sender works for around a second to mint a stamp, then puts it in the email header. The receiver re-hashes and checks the zeros in microseconds, and no central server is involved.
The economics flipped: a legitimate user spends a second per message, but a spammer sending millions of messages must spend millions of seconds of CPU. Because the difficulty is selectable, the puzzle can be hardened as computers get faster, and hashcash could be adopted incrementally — clients that did not understand the header simply ignored it.
Hashcash never ended spam on its own, but the idea became foundational: Bitcoin and later cryptocurrencies use the same hash-based proof-of-work to secure blocks, and SpamAssassin checked hashcash stamps for years as a signal that a sender was legitimate.
why it works
- The cost sits with the sender, where the volume is
- Verification is microseconds, so receivers pay almost nothing
- Difficulty is tunable, so the price rises with hardware
- The header is ignorable, so deployment could be incremental
what transfers
When abuse scales because a resource is free, price it at the point of use: make the cost tiny for legitimate users and ruinous at spammer volume, and let the receiver verify cheaply.
what came after
Hashcash's proof-of-work design was adopted directly by Bitcoin, whose miners solve the same kind of partial-preimage hash puzzle to win blocks, making Back's anti-spam stamp the ancestor of cryptocurrency mining. Microsoft's Email Postmark and SpamAssassin support showed the idea's reach, and proof-of-work remains the standard way to make un-metered resources costly to abuse.
references
spotted an error? The archive wants to know.