John Levine wrote:
It seems to me you may be saying that a look-alike domain can be made
to look more authentic than the actual domain. Is that right? If
so, I'd like to understand that.
It doesn't have to look more authentic. It only has to look as
authentic. With SSP, everyone can publish equally authentic "PHISH
TARGET" notices.
The list discussion seems to be spending an awful lot of time on issues
that are theoretical, poorly understand, and lacking in a clear
community consensus that we need a solution.
How is this productive?
d/
--
Dave Crocker
Brandenburg InternetWorking
bbiw.net
_______________________________________________
NOTE WELL: This list operates according to
http://mipassoc.org/dkim/ietf-list-rules.html