ietf-mxcomp
[Top] [All Lists]

Re: Trouble with Sender Authentication

2006-11-08 21:57:49

On Wednesday 08 November 2006 14:36, Douglas Otis wrote:
On Nov 8, 2006, at 10:10 AM, Scott Kitterman wrote:
On Wed, 8 Nov 2006 09:15:29 -0800 Douglas Otis <dotis(_at_)mail-

abuse.org> wrote:
When you say the word script, do you mean SPF records (Please,
this is meant to be a yes/no question, there's no need to write a
dissertation that repeats the arguements made earlier in the
thread.  I read those already.)?

The concern is with libraries that execute scripts labeled as SPF
1 or 2 contained within DNS resource records.  A potential attack
utilizing just the access of these resources records has not been
described.

Is that a Yes?

This has been succinctly answered.  Record is _not_ synonymous with
script.

OK, then I guess that's no.

Record != Script.  I see from the above that in your view libraries execute 
scripts, so SPF checking library != Script.  I'm not sure what is left.  

Rather that rehash your 'succinct' answer, please point me to the page and 
line number(s) of your draft that either is a script or describes what it is 
and I'll look it up there.

Scott K

<Prev in Thread] Current Thread [Next in Thread>