Alternatively, your company could choose not to act as a copyright cop.<p>Edit: Actually, reading the IETF link you posted, notifying users of a potential malware infection might be an example of how to use this technology in a non-shitty manner.