In <561568912(_dot_)20040310183302(_at_)brandenburg(_dot_)com> Dave Crocker
<dhc(_at_)dcrocker(_dot_)net> writes:
w> When
w> you get to the point of identifying a particular author, I'm not sure
w> that it is so important to worry about the MTA that the email was sent
w> from.
My reading of the majority of the MTA Authentication schemes is that
they purport to validate authorship (and, therefore, really are making
statements about the From field) based on having the message transit
authorized MTAs.
I disagree. I know of none of the LMAP proposals that purport to
validate authorship. They talk about authorization and
authentication, but they don't try to pin down an author.
I recommend reading:
http://www.ietf.org/internet-drafts/draft-irtf-asrg-lmap-discussion-00.txt
w> You left out the relationship between the sending MTA and the domain
w> used in the HELO and/or MAIL FROM commands.
What relationship do folks think this is (or should be) between the EHLO
domain name and the network the MTA operates in?
I think that if an MTA claims to be involved with my domain on either
the HELO or MAIL FROM commands, that I should have a say in it.
As for Mail From, that is a bounces address, and is not required to have
anything at all to do with authorship.
I don't know anyone who thinks that the MAIL FROM has anything to do
with the authorship.
There are entirely legitimate
uses that set the Mail From to an address that is entirely different
From the From field.
Yes, for example, this mailing lists changes the MAIL FROM.
-wayne