Re: Is SPF Authenication or Authorization?

--On Dienstag, September 21, 2004 18:41:21 -0400 Meng Weng Wong 
<mengwong(_at_)dumbo(_dot_)pobox(_dot_)com> wrote:
[...]
> Every authentication scheme draws a boundary between the
> acceptable set and the prohibited set.
No, that is authorization. Authentication is verification of identity. SPF 
is a means to define authorization, while authentication is done by 
examining the IP address of the sending system and optionally a 
cryptographic signature (by using TLS and client certificates).
Ralf Döblitz