In <e+iUZLdwwflCFAb1(_at_)highwayman(_dot_)com> Richard Clayton
<richard(_at_)highwayman(_dot_)com> writes:
Hence, since they still want to spam, they will start sending email with
borrowed domains from borrowed machines... they are already doing the
latter, they don't do the former because there's currently no need. SPF
would, if adopted, provide the evolutionary pressure for them to do so.
Of course you may feel that if fred(_at_)example(_dot_)com is so dumb as to
install
a spam-sending trojan that it serves him right if example.com gets a
really bad reputation. However, if I have a need to swap email with
example.com employees how exactly has SPF improved the situation here ?
example.com can quickly update their SPF record to remove the
offending IP address from their approved list.
-wayne