ietf-mxcomp
[Top] [All Lists]

Re: Trust, and who knows what (was Re: SPF abused by spammers )

2004-09-19 12:29:45

Mark,


On Sun, 19 Sep 2004 10:57:50 -0700, Mark C. Langston wrote:
 But with SPF, the trust you're being asked to place is not whether the
 sender is authorized to use that MAIL FROM:; it's whether the entity
 connecting to your MTA (the destination MTA, presumably) is one
 associated with the MAIL FROM: RHS.  It's a somewhat subtle, but
 important, distinction.

I think that summarizing SPF as asking "whether the sender is authorized to use 
that MAIL FROM:"

Rather than simply giving a different summary that is valid, could you please 
explain what is wrong with the semantics of this one?

d/
--
Brandenburg InternetWorking
dcrocker(_at_)brandenburg(_dot_)com
+1.408.246.8253