As I think has been hashed out before, it's utterly impossible to keep
people from creating lookalike domains.
And as I think has been hashed out before, if we attempt to boil the ocean,
which is what you're suggesting, we will fail.
Actually, all I was going to suggest was that if SSP purports to manage
addresses on the From: line, it should manage all of them rather than
arbitrarily giving N-1 of them a free pass.
because simply SOMEONE taking responsibility for the message mandates
the need to establish reputation of that someone
Indeed. Does this mean you agree that SSP only applies to unsigned
messages? (Actual non-rhetorical question.)
R's,
John
_______________________________________________
NOTE WELL: This list operates according to
http://mipassoc.org/dkim/ietf-list-rules.html