SSP has an advantage when we assume that criminals
are stupid enough to keep sending forged mail. It
has no advantage with look-alike attacks. Guess what
criminals will do.
They will stop using real domains and start using other domains (assuming your
logic plays out).
This is PROGRESS. This is something positive (not negative).
Today I received a half dozen paypal phishing mails. All had
"<local-part>@paypal.com" in the FROM header. SSP can stop that. SSP can't
solve everything but that's no reason not to let it address what it can solve.
--
Arvel
_______________________________________________
NOTE WELL: This list operates according to
http://mipassoc.org/dkim/ietf-list-rules.html