Folks,
Can a spammer set up a domain and rDNS with records under the spec and
spoof From: yes, for all the extant I-Ds, including this one, and C-ID,
...
JL> If anyone would like to try out CSV, for your convenience I've set up
JL> DNS that will let you use any host anywhere for 100% CSV compliant
Anyone with administrative control of a domain name can assert that it
maps to any IP Address they choose.
Anyone with administrative control of an in-addr.arpa IP Address entry
can assert that it maps to any domain name they choose.
A goal of ensuring that such assertions are "authorized" must,
therefore, come from some additional mechanism(s).
d/
--
Dave Crocker <mailto:dcrocker(_at_)brandenburg(_dot_)com>
Brandenburg InternetWorking <http://www.brandenburg.com>
Sunnyvale, CA USA <tel:+1.408.246.8253>, <fax:+1.866.358.5301>