spf-discuss
[Top] [All Lists]

Re: A couple of thoughts

2004-02-19 09:11:39
On Tue, Feb 17, 2004 at 01:42:32PM +0000, Brian Candler wrote:
I can't see any solution to this apart from having a message signature or
cookie which lets me prove that an incoming bounce was in response to a
message I sent. Such a cookie could go:
(1) in the envelope-sender address (VERP)

This is what ezmlm does for subscription verification.  Envelope is
much more efficient to deal with.  In case of qmail, all envelope info
is recorded in environment variables.

(2) in a message header, although this relies on the bouncing MTA quoting
    back at least the headers of the message it is bouncing, which not all
    MTAs do [and certainly not all are RFC 3462 compliant].

This requires much more work because it requires parsing DATA.

Mate
---
Mate Wierdl | Dept. of Math. Sciences | University of Memphis  
Please avoid sending me Word or PowerPoint attachments.
See http://www.fsf.org/philosophy/no-word-attachments.html


<Prev in Thread] Current Thread [Next in Thread>