spf-discuss
[Top] [All Lists]

Re: Reputation Services and HELO/EHLO Checking For Unified SPF

2004-07-11 12:13:16
----- Original Message ----- 
From: "David Brodbeck" <gull(_at_)gull(_dot_)us>
To: <spf-discuss(_at_)v2(_dot_)listbox(_dot_)com>
Sent: Sunday, July 11, 2004 2:03 PM
Subject: RE: [spf-discuss] Reputation Services and HELO/EHLO Checking For
Unified SPF


Semi-related point I ran across today...

A federal appeals court has ruled that it's legal for ISPs to eavesdrop on
mail going through their servers for any purpose, including commercial
espionage:

http://apnews.excite.com/article/20040701/D83HMB0O0.html

This starts to make direct-to-MX mail look considerably more attractive.

Ouch!

That is not what the ruling says and it should definitely not suggest a new
era of irresponsible and unethical programming that will "would undo decades
of practice and precedent."

That is what bothers me the most about all the crap going on with
administrative level people trying to force a change at the transport level
that has always adhered to the legal practices.


Its about Final Destination vs Routing.  Analysis of mail has always been
available for final destination as a SYSTEM POLICY - for ROUTING it is where
you will go to jail (under US laws).

But if you (speaking in general) are now going to ask software vendors to
make the "feature" available for SMTP for idiot sysops to abuse!?  Well,
Not me.  It ain't going to happen here and I will use that as a "security
strategic competitive advantage" marketing item against all email software
vendors that begin to offer "backdoor Mail Sniffing Features!"

If the sysop is going to do that, thats out of my whelm, let him write his
own stuff, perl or otherwise as a POST SMTP process.  But please "Lets Not
Program it into the Transport level" allowing him to just do it by "turning
something on!"   We will really create a big mess if software people began
to do this!

Thanks for the link.

-- 
Hector Santos, Santronics Software, Inc.
http://www.santronics.com