Re: "Header Reordering", yet again

On Tue, 31 May 2005 17:19:41 +0200, Frank Ellermann said:
> Arnt Gulbrandsen wrote:
>  
> > just use DomainKeys to sign the Received-SPF header field ;)
> Try `nslookup -q=mx` and find the corresponding header fields,
> for an environment where they arrive out of order.  
>
> In an environment where these headers are only sometimes added,
> _and_ arrive out of order, _and_ a spammer finds the way where
> they are not added, _and_ the spammer forged a PASS you lose -
> or you ask your postmaster to fix it.
Identifying conclusively that headers were added out of order is problematic
when not everybody runs NTP or other timesync.

pgpKWPc3Bj3wu.pgp
Description: PGP signature