Re: Lawsuits, angry business users, and SPF stupidity.

On Wed, Jan 14, 2004 at 12:09:37AM +1100, Chris Drake wrote:

> Yes - kindof - I want the "right" to operate an email service that
> exists between senders and recipients.  Anyone who wants the right to
> run their own SMTP server (eg: to avoid ISP mail delays) also fits in
> my category.  We do all have the right+permission to use our
> respective email addresses though.
A  me, wanting to use B
B  you, and your business
C  any intended recipient using SPF records

C will do a DNS lookup for the domain of A
A will provide a policy to C
C will comply with the policy as set by A, blocking or tagging the mail

Nowhere "B" takes part in the process.  If A wants to act B as an
outgoing mail server, A will have to say so.


The only problem I can see right now is when B is incompetent.  If the
DNS records are not properly maintained, A will not be able to convince
C that this is in fact a real policy.  Again, A chooses to use B's
services and is thus in control.

> Sender authentication should be done in the client - not in the ISP.
Tell the ISP.  The ISP can tag and the client can decide what to do.
Do not tell the protocol, nor the sender, what to do.

Alex

-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Latest draft at http://spf.pobox.com/draft-mengwong-spf-02.9.4.txt
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡