From: Stuart D. Gathman
Sent: Thursday, June 03, 2004 11:08 PM
On Thu, 3 Jun 2004, Michael R. Brumm wrote:
Finally, I've thought a lot about SRS vs. SUBMITTER in the past
few days.
SRS:
ugly
not exploitable
requires upgrading only the MTAs which forward
SUBMITTER:
pretty
bounce forgery is exploitable
requires upgrading ALL MTA which wants to receive a forward
(much larger pool)
You forgot:
Resurrecting Deprecated Reverse Source Path:
pretty
bounce forgery is exploitable (fixable with SES, btw. See
suggestion for validating SES via DNS instead of CBV.)
requires upgrading (or downgrading :-) only the MTAs which forward
Absolutely. This is already in the RFC's, it won't break any MTA's that
don't implement the protocol and it requires no new ESMTP parameters. This
really seems like a pretty obvious choice.
--
Seth Goodman