spf-discuss
[Top] [All Lists]

Re: Opening Debate on SPF vs. SenderKeys

2004-08-20 09:20:03
What is the defect in SPF then? 

http://accuspam.com/senderkeys.php

Read the page please.


*fairly* sure is not good enough - too many false positives implied here. 


Wrong.  You are confused.  Please re-read the page.


I pay my ISP to connect me - if their costs go up - so will mine


You pay for all the forgery you download also (twice actually), which would be 
eliminated.


Which is just about everyone who has a private domain name - that's a tall 
order for loads of people who are not tech savvy. 


Wrong.  They only have to download an upgrade for their existing email program.
Nothing technical at all.

SPF is much more technical hurdle for them because then they have to configure
SMTP AUTH (server and email program upgrade), DNS, and still forwarding is 
broken
or complicated.


AccuSpamTM ...sending an auto-response email


Already mentioned on website and forums.


stand a good chance to get reported as spammers and have their accounts
cancelled or their servers blacklisted


Any one who is being forged has a good chance of being blacklisted by many 
anti-spam.

That is one of big motivations for anti-forgery proposals.


SPF to see if the mail-from was forged before you 
sent out your challenge and reply


Unfortunately SPF can not do that, unless "-all" is specified.  If "-all" was 
widely adopted, then you'd really have false positives all over the place.

SenderKeys provides a way to do "-all" where "-all" is not practical for most 
domains.


Great, go fuck yourself then.. And don't bother us with your useless crap, 
please..

No-one who believes in security uses IE, the sites I host
(some of which get 200.000+ hits a day) show a market share of
34%... Get your facts checked please..

Grow up a bit, realize there is more then just one OS, ... , more then just 
one browser


http://www.infoworld.com/article/04/07/12/HNielosesshare_1.html

IE has 95% marketshare.  That leaves 5% for Mozilla, old Netscape, Firefox, and 
what ever else.

So maybe Mozilla plus old Netscape (which won't display CSS any way) is 3%.

The mature business person knows which browser butters his bread.

Do a Google search on 80/20 rule, which is a very important time management 
skill.

Sorry, wish it wasn't true, but there really is a monopoly (in case you did not 
notice).



Besides, i think their accuspamTM system is a copy of some systems already 
out there


You are highly misinformed.

Unfactual posts do not help solve forgery and does not factually compare SPF 
and SenderKeys.

The point of this discussion should be to factually compare the two proposals.

I am sure your motivation is to arrive at the optimum solution, whether it be 
SPF, SenderKeys, DomainKeys, SenderID, or some combination or other proposal?


I'm not going to read anything from an autoresponder that's going to 
make me take ANY steps to get my mail delivered


Off topic, but for the record, AccuSpam does not force the sender to do 
anything so that recipient can receive the sender's email.


Thanks,
Shelby