spf-discuss
[Top] [All Lists]

Re: DDoS attacks via SPF

2003-12-18 20:06:17
On Thu, Dec 18, 2003 at 08:20:50PM -0500, Philip Gladstone wrote:
| The %t macro is pretty useless in the exp message -- how many people 
| know what the date 1003787651 is? Originally, I had thought that it was 
| mostly useful to generate domain names that were not cached. However, I 
| now think that the DNS server can always serve up the response records 
| with a TTL of 0 or 1 if that effect is desired.
| 
| I'd be in favour of doing away with %t entirely, and maybe replacing it 
| by the date in some standard form (2003-12-18 20:20:00-0500)
| 

%{t} is meant to be a URL argument.  I expect ISPs to use exp= to set up
web pages for users who need to "phone home" using SASL SMTP.  Those web
pages need all the clues they can get.  Knowing the time of a problem
scenario is useful because that lets you say "we had a minor DNS
misconfiguration on Saturday morning, please disregard any bounces you
saw and resend the message, it should go through now".

web pages can then display the localtime()d version.

-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Latest draft at http://spf.pobox.com/draft-mengwong-spf-02.9.4.txt
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡