I apologize that this is past the deadline for the interim meeting, but
a passing comment by John Levine at the MAAWG meeting on Tuesday (15
hours ago) prompted some later discussion and produced the _very_ rough
draft of a specification that is available at:
<http://brandenburg.com/specifications/draft-crocker-marid-batv-00-06dc.html>
It promises a dramatically cheaper means of validating RFC2821.MailFrom
addresses than any other proposal to date.
Abstract:
The envelope of Internet mail may contain an RFC2821.MailFrom header,
which supplies an address to be used as the recipient of transmission
and delivery notices about the original message. Existing Internet mail
permits unauthorized use of addresses in the MailFrom field, causing
notices to be sent to an unwitting recipient. The current specification
defines a mechanism for validating the value in this field. The
mechanism requires very little administrative overhead and does not
require global implementation.
d/
-----
Dave Crocker <mailto:dcrocker(_at_)brandenburg(_dot_)com>
Brandenburg InternetWorking <http://www.brandenburg.com>
Sunnyvale, CA USA <tel: +1.408.246.8253>; <fax: +1.408.850.1850>