ietf-asrg
[Top] [All Lists]

Re: [Asrg] Third party DKIM signatures

2006-06-01 16:20:17
On Thu, Jun 01, 2006 at 01:32:14AM -0400, Seth Breidbart wrote
"Walter Dnes" <waltdnes(_at_)waltdnes(_dot_)org> wrote:

 Real-life question...
 1) How does any ISP (beyond a really small geek outfit) verify that I
am authorized to use *(_at_)waltdnes(_dot_)org ?

Ask postmaster(_at_)waltdnes(_dot_)org

  Being "master of my domain", I can personally answer that question on
my own behalf.  Would Google or Yahoo be able to verify to example.com
that Joe Blow is authorized to send out email as joeblow(_at_)yahoo(_dot_)com or
joeblow(_at_)gmail(_dot_)com when sending email from example.com?  Manual
confirmation doesn't scale.  Automating it opens up the potential for
address harvesting.

-- 
Walter Dnes <waltdnes(_at_)waltdnes(_dot_)org> In linux /sbin/init is Job #1
My musings on technology and security at http://tech_sec.blog.ca

_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg