spf-discuss
[Top] [All Lists]

Re: Sub domains

2004-08-20 19:25:55
On Thu, Aug 19, 2004 at 12:45:06PM -0700, Mark C. Langston wrote:
| Only if you relied on GOSSiP as your sole determiner of mail acceptance
| or rejection.  That'd be foolhardy, as would relying on any single check
| on incoming mail for such determination.  There is no one single
| mechanism that can definitely say "accept this" or "reject this" for all
| incoming mail, with zero false positives and zero false negatives.
| 
| Spam prevention, much like security, requires multiple layers (the
| "onion" analogy) to be effective.  Anyone ignoring that does so at their
| peril.

I want to echo Mark's point; folks who hope for silver
bullets are, perhaps, committing the fallacy of the excluded middle.

Defense in depth says:

 if authenticated & reputable: accept
 if blacklisted or forgery:    reject
 else:                         content filter / greylist / file to spamfolder

I expect door #3 to remain heavily trafficked for the
foreseeable future.


<Prev in Thread] Current Thread [Next in Thread>