Hector Santos wrote:
That's fine and dandy, but SPF should not enforce or dictate SRS as
the way
to ensure complete operability or compliance or responsible behavior.
Using SPF should in no way imply one must also support SRS.
I don't believe anywhere in the SPF spec it dictates that you must use
SRS to fix the issue with forwarding, however it does state that SPF
will break forwarding and that you must use some kind of sender
rewriting scheme to fix it (IIRC). It just so happens that most of the
people involved with SPF also sit firmly in the SRS camp as opposed to
any other sender rewriting scheme, and therefore when discussion turns
to how SPF breaks forwarding, SRS is what gets recommended.
---
Dustin D. Trammell
Vulnerability Remediation Alchemist
Citadel Security Software, Inc.