In <1073911565(_dot_)31544(_dot_)50(_dot_)camel(_at_)mibi02> "Dr. Ernst
Molitor" <molitor(_at_)uni-bonn(_dot_)de> writes:
would you care to describe to me why spf is at all necessary if spam
traps are this efficient?
Obviously, spamtraps are not efficient enough and certainly not able
to block after only several thousand spams get sent. Although the
spamtraps used by cbl.abuse.at and bl.spamcop.net are very good.
Part of the problem is that most blacklists work off of IP addresses,
and with the millions of home machines that have been turned into open
proxies by email worms, spammers can switch IP addresses very quickly
and for free.
If spam mails would
originate from spf-conforming "spam domains" run by the bad guys, what
advantage would spf buy in spam avoidance?
Well, as has been discussed many times, SPF helps domain owners by
preventing *their* domain from being forged. They have reduced costs
by not having to deal with the bounces sent back to their systems.
They have reduced costs due to the gobs of folks out there that can't
read headers correctly and falsely complain about spam "coming from
them." SPF helps protect their brand names and helps protect their
customers from phishing.
SPF gives domain name owners lots of reasons to spend the few minutes
it takes to add a TXT record to their zone file.
SPF also makes it much harder for email worms to fake email
addresses. SPF makes RHSBLs more effective (most black/block/boycott
lists currently use IP addresses). SPF makes local and per-user
whitelists more effective.
-wayne
-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Latest draft at http://spf.pobox.com/draft-mengwong-spf-02.9.4.txt
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡