Re: SPF advocacy
2004-01-27 19:39:29
(I've looked, but if I'm making some wrong assumptions, i apologize in
advance..)
What we really care about is the authentication that the headers listed
is truthful. As long as one of the headers (Sender:? ) with the email
address is truthful, and the Reiceved-From: are good, we can track
spam, and do blocking, as needed.
A short bit of discourse:
I have my own mailserver, at my apt, on earthlink. I use their SMTP
relay servers, for now.
I may have to set my Sender: to be username(_at_)earthlink(_dot_)net even though
my From: is mbarr(_at_)example(_dot_)net(_dot_)
This may end up with some email clients needing to be able to set the
Sender: header, in addition to the From: & Reply-To:
Now, what I will probably do is just make sure that I can send out via
my own servers, or add the ptr to earthlink, for my domain. For a user
that wants to send as Meep(_at_)uni(_dot_)edu, but from Earthlink, it might be a
bit harder, until there is an ability to set Sender:
( Throughout this, I've been assuming the envelope data is stored in
the Sender: header. I could be wrong on that one.. Just roll with it
:-)
They will either have to set the envelope to an address the SMTP server
is authorized for, or the Rewriting will have to happen.
The Uni people will have to live.. or go with +all or ?all. Or just
allow their old alumni to connect back into the net for SMTP.
(I doubt the later part will happen. Too much work for managing
authentication. But at least it's not storage space.. just the
temporary SMTP relay.)
Matthew
--------------------------------
Matthew Barr
mbarr(_at_)datalyte(_dot_)com
Managing Partner
Datalyte Consulting, LLC.
(646) 765-6878 (cell)
On Jan 27, 2004, at 2:23 PM, Vivien M. wrote:
-----Original Message-----
From: owner-spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
[mailto:owner-spf-discuss(_at_)v2(_dot_)listbox(_dot_)com] On Behalf Of
ck(_at_)kuckuk(_dot_)com
Sent: January 26, 2004 4:47 PM
To: spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
Subject: Re: [spf-discuss] SPF advocacy
I think agreement can be reached in the cases where
- companies tell their employees which SMTP server to use
What about large corporations where the company does not tell the
employees what SMP server to use?
All the companies I know want to have tight control over the
e-mail that is sent or received by their employees, and they
mandate using specific software (Notes, Groupwise, etc) and
sending and receiving all their e-mail via central servers.
Home office workers usually connect via VPN to their
company's networks. So I don't see any problems here except
for big corporations who are just getting their feet wet with
Internet technology.
What about educational institutions? If we want to have this debate
again
(this horse just won't die), you need to look at more than your
publicly-traded Fortune 500 companies.
That said, I don't really want to resuccitate this horse... But I have
argued in the past (see the archives) and will argue again that there
are
many legitimate reasons why someone would need to use a
non-domain-owner-provided SMTP server in cases where the domain
owner's SMTP
follows the old "relay for your local IPs" model. Such a domain owner
could
not, without severely inconveniencing some people (many of whom are at
the
bottom of the organizational food chain), deploy SPF without
reconsidering
how people in this "grey" zone use email.
Vivien
-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Latest draft at http://spf.pobox.com/draft-mengwong-spf-02.9.4.txt
Wiki:
http://spfwiki.infinitepenguins.net/pmwiki.php/SenderPermittedFrom/
HomePage
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡
-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Latest draft at http://spf.pobox.com/draft-mengwong-spf-02.9.4.txt
Wiki:
http://spfwiki.infinitepenguins.net/pmwiki.php/SenderPermittedFrom/HomePage
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡
|
|