spf-discuss
[Top] [All Lists]

Re: <responsible-sender> header selection algorithm

2004-02-06 19:59:54
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Meng Weng Wong writes:
I punted again.

  It is RECOMMENDED that the <responsible-sender> be drawn from the
  envelope using this algorithm:

    The <responsible-sender> comes from the domain name of the "MAIL
    FROM" envelope sender.  When the envelope sender has no domain, a
    client MUST use the HELO domain instead.  If the HELO argument does
    not provide an FQDN, SPF processing terminates with "unknown".

    If SPF processing occurs after SMTP time, the envelope sender may
    be obtained from the Return-Path header.  If the Return-Path header
    has no domain, a client MAY try to extract the HELO domain from the
    Received headers.  If the headers do not yield useful envelope
    information, SPF processing terminates with "unknown".

  However, the <responsible-sender> address MAY be drawn from an
  alternative source.  For example, an MUA may find it more convenient
  to extract the <responsible-sender> from the Return-Path header or
  from the Sender: header.

Seems reasonable to me.  There's no alternative that seems to work
reliably, as far as I can see.

- --j.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
Comment: Exmh CVS

iD8DBQFAJFSqQTcbUG5Y7woRAjgDAKCb7AnLW3narLaFuATgraryTrcRHgCgj1Fi
IYsXmQnKe5yR6OH9oCscBI8=
=gtb/
-----END PGP SIGNATURE-----

-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Latest draft at http://spf.pobox.com/draft-mengwong-spf-02.9.5.txt
Wiki: http://spfwiki.infinitepenguins.net/pmwiki.php/SenderPermittedFrom/
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡