From: wayne
Sent: Thursday, March 25, 2004 9:29 AM
In <20040325135911(_dot_)GA37479(_at_)uk(_dot_)tiscali(_dot_)com> Brian
Candler
<B(_dot_)Candler(_at_)pobox(_dot_)com> writes:
<...>
My suggestion would be to choose a solution which fits the
problem. If your
problem is that you receive lots of joe-job bounces, the
solution is to use
SRS-style sender cookies in the envelope of your outgoing mail, as
documented on this list. It's an instant solution which doesn't require
cooperation of anyone else on the Internet.
I agree that using SRS on all outgoing email can be very useful. It
doesn't solve as many problems as SPF does and it has different costs
which make impractical for certain cases, but using more than one
defense has it's own advantages.
By itself it doesn't, but combined with SPF it solves _more_ problems than
SPF currently does and causes far less breakage. I refer you to my posts in
SRS-discuss. I would also like to know what are the costs that make it
"impractical for certain cases" and what those cases might be. It's hard to
imagine a more costly solution than the present SRS, yet you obviously feel
that is practical.
<...>
What would this final solution look like? I think:
[long discussion deleted]
Let me know when you have actual code that implements your ideas.
I hope you're not implying that only people who are writing implementations
have the right to suggest ideas that will be seriously considered. Brian
obviously spent considerable time developing and writing up his ideas, and
posted them for the benefit of the group. That kind of effort deserves
serious consideration.
--
Seth Goodman