spf-discuss
[Top] [All Lists]

Re: Dealing with "legitimate" forgers

2004-07-11 16:10:54
Hi Jeffrey,

There's a whitelist for those people (ebay and paypal also do this)
for the interim - in the future, they'll be expected to re-write their
headers to be SPF and CID compliant.

Kind Regards,
Chris Drake

Monday, July 12, 2004, 3:11:38 AM, you wrote:

JG> A number of businesses will "legitimately" counterfeit mail from their 
JG> customers.
JG> One example is Federal Express which may send email to the recipient of 
JG> a package
JG> on "behalf of" and forged in the name of the customer sending the 
JG> package.

JG> Other sorts of services routinely send out "invitations" or the like in 
JG> the name (and address) of the user.

JG> Now I'm sure that most of us agree that that is a bad practice that 
JG> will have to come to an end.  But has anyone had any luck contacting 
JG> such sites and persuading them to change their policies?

JG> I have a client who regularly uses FedEx for shipping.  While I can 
JG> certainly add
JG> something like

JG>     ?a:fedex-outgoing-servers/24

JG> to my client's SPF record, I would prefer not to do so.

JG> -j


<Prev in Thread] Current Thread [Next in Thread>