On Mon, Oct 06, 2003 at 12:02:48PM -0700, Ted Cabeen wrote:
|
| Would something like a identd for mail work? When a mail is received,
| you connect to the DNS-identified server of the sender, submit a
| messageid and a sender, and get a response as to whether that message
| id was sent by that sender?
mjd has proposed something like this.
http://archives.listbox.com/spf-discuss(_at_)v2(_dot_)listbox(_dot_)com/200309/0017.html
Problem is, you don't get the Message-ID until DATA.
Even more radical is djb's Internet Mail 2000.
http://cr.yp.to/im2000.html
The logical extreme is to modify 2821 to insert Habeas-style cookies!
And even then there's the spoofing problem --- a bad guy just reads off
the secret from some incoming mail, and forges using that secret.
-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡