-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Wed, 14 Apr 2004, Meng Weng Wong spewed into the bitstream:
MWW>On Wed, Apr 14, 2004 at 02:39:20PM +0200, K.F.J. Martens wrote:
MWW>| On Wed, Apr 14, 2004 at 12:15:02PM +0000, Mark wrote:
MWW>| > It seems at least the leading folks behind sendmail have grown rather
MWW>| > negative about SPF. CLauss' portrayal of SPF, btw, is not really doing
SPF
MWW>| > justice.
MWW>|
MWW>
MWW>It's right and proper for the "establishment" to vigorously defend
MWW>themselves from new and unproven ideas. It's our job to move SPF from
MWW>"unproven" to, at least, "tested". Along the way, some critics with a
MWW>vested interest in, or an emotional attachment to, "the way things have
MWW>always been done" may couch their arguments in pessimistic terms ---
MWW>they will describe SPF's weaknesses as permanent, pervasive, and
MWW>inherent to it.(*5) That is, perhaps, more a reflection of their
MWW>personal pessimistic explanatory style than of the problems with SPF.
MWW>Things take time. Just because it's not a silver bullet doesn't mean
MWW>it's worthless. As Faraday replied, "what is the use of a newborn
MWW>baby?"
MWW>
MWW>Sender authentication is a classic Kuhnian paradigm shift.(*1) We're
MWW>trying to pull it off using the tricks given by Geoffrey Moore.(*2,*3)
MWW>These are exciting times because the summer of 2004 looks like it'll be
MWW>the tipping point for SPF.(*4)
This is interesting commentary. I had a discussion last week with someone
who was really harping on the SRS problem and I just shrugged. He could
not understand why I was willing to accept this issue with forwarding
continuing in an fully "SPF" net. Again I shrugged and he hammered some
more. I just said that IMHO the loss of forwarding was/is a minor
inconvenience when balanced against the problems with spam and worms and
that if SPF could fix that I was willing to accept the limitation rather
than continue to accept the danger and the expense of allowing the net to
continue on the path it's on today! Now please don;t misunderstand me... I
would really prefer a working SRS implementation but until there is that
is not a justification for me to turn off SPF!
- --
csm
Lunar Linux Project Lead
Disclaimer: "I am not a curmudgeon! No... really..."
Addendum: "Bwahahaha! Fire up the orbital mind-control lasers!"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
iD8DBQFAfW6Sq3bny/5+GAcRAvYfAJ48rKuenMK0ygBM7d7bhMI6+uKnJwCfV4Zv
wtj4IjvqgWfa6IRueDmr5xw=
=cJfN
-----END PGP SIGNATURE-----