spf-discuss
[Top] [All Lists]

Re: Lawsuits, angry business users, and SPF stupidity.

2004-01-13 15:58:32


On 13 Jan 2004 jsb(_at_)digistar(_dot_)com  wrote:

On Tue, 13 Jan 2004, Chris Drake wrote:

I hate spam, but just like 99% of all other business email users, I can
*never* afford to loose even as much as *one* email - EVER.

Oh my gosh - I got into this one late in the game.

SMTP is not a guaranteed delivery service - it is best effort - if you
require this kind of service you should seek alternative means for message
delivery (postal mail, telephone, fax, etc.).  I'm not being a smart-ass,
that's just the way it is.

Not that I agree with everything he says, but I think what he is really 
saying here is "I cannot reject any good mail for any reason".  If the 
anti-spam software says it 99.99% percent sure it's spam, it will still 
be received and manually processed by a postmaster.  Even a 0.01% FAR 
when you are receiving 30,000 messages a day is a lot of good mail going 
down the drain.

FWIW, I find that email is much more effective in getting information 
accurately processed than smail, FAX or telephone.  


I strongly object to you guys forcing my ISP to trash my incoming email
without my permission.  I VERY strongly object to you guys forcing my
recipients ISP to trash my incoming emails without my permission.

I believe if you read the fine print you will discover that SPF provides a
mechanism to ward off email that was composed using fraudulent methods,
not to arbitrarily delete valid email on a whim.

This "composed using fraudulent methods" is a really grey area when the 
message is actually from a valid user that is simply sending via an 
invalid server.


Now, if your business model requires the reception of fraudulent content
from fraudulent sources my guess is your ISP would prefer you go away and
play somewhere else...

This does not follow.  There is nothing in this RFC that says that any 
message that comes from a unregistered server contains invalid or 
fraudulent content.  You may say that after you have actually read the 
message but assuming this is just making an assumption not supported by 
the specification.



I'm very surprised at your dissatisfaction with such an elegant and
non-invasive technique for controlling the reception of invalid email.
SPF provides a clean approach to prevent transmission of unwanted and
illegal emails.  It's the least invasive solution to date because no human
is involved in the process of refusing email - published DNS records by
the domain administrator set the policy to advise SPF-enabled mail
handlers to reject fraudulent emails.  I say again, no human acts as the
arbiter.

Again you make the assumption that the mail is in fact invalid since it's 
coming from an unregistered source.


I realize that you would like to receive every single piece of email
intended for you to read, and that is a great goal to aspire to, but as my
dear old Grandmother used to say when I asked her for candy or toys when I
was little, "People in hell want icewater."

When the CEO says you can play around all you want but you had best not 
block any good mail then my grandmothers old sayings are not a part of 
the equation.  ;-)

As a mail system admin my task is first and foremost to receive all of 
the good mail;  blocking of spam and even verifying the senders is 
secondary to this primary task.




later...
jsb

-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Latest draft at http://spf.pobox.com/draft-mengwong-spf-02.9.4.txt
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡





Thomas R. Stephenson, CPL          Phone: (408) 742-3308
Lockheed Martin Technical Operations  
MILSTAR Logistics Engineering O/M5-41  B/158
P.O. Box 61687 Sunnyvale, CA 94088-1687   

Member Pegasus Mail Support Team

Thought for the day:
People who insult others are jerks.



-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Latest draft at http://spf.pobox.com/draft-mengwong-spf-02.9.4.txt
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡