ietf-mxcomp
[Top] [All Lists]

Re: you must fill your zones with TXT records

2004-08-10 19:38:27

On Tue, Aug 10, 2004 at 08:18:40PM +0100, Tony Finch wrote:
| 
| Traditional remote domain verification involves checking that the domain
| stated in an email address has a valid MX or A record published in the
| DNS. This implies that a spammer could send email "from" any old machine
| with an A record and expect it to be accepted. Sender-ID does not solve
| this problem unless you publish a -all record for EVERY HOST on your
| network, since in the absence of a Sender-ID record the recipient will
| fall back to the current behaviour.
| 

I wonder how feasible it would be to deprecate the implicit
MX rule.