spf-discuss
[Top] [All Lists]

Re: SPF-compliant phishing?

2004-09-15 13:42:06
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wednesday 15 September 2004 12:30 pm, David Woodhouse wrote:
You're not answering the questions I asked. We know the police can track
you, and they can do that with only an IP address. That isn't really
relevant to what I was asking, and it certainly isn't a benefit of SPF.

The benefit comes because of the MO of the spammers of today. If you track 
the IP address, you get a zombied machine. However, if the spammer 
publishes an SPF record listing the zombied machine as a valid sender, then 
you have another path to track down the spammer with.

We already know how to find spammers who use their machines to send spam. We 
need to have a way to find spammers who abuse other's machines to send 
spam. SPF provides a way to get directly to the party responsible.

- -- 
Jonathan M. Gardner
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQFBSKkeBFeYcclU5Q0RAlB8AKCZuUc28VumPQK7DdA4uhDXHB76zQCgsp2q
U9TDOjr/FiBLmEuN0oIKm4s=
=lrsz
-----END PGP SIGNATURE-----


<Prev in Thread] Current Thread [Next in Thread>