spf-discuss
[Top] [All Lists]

Re: Sender ID in the news

2004-10-25 11:31:12
On Mon, Oct 25, 2004 at 01:14:43PM -0500, wayne wrote:
| 
| When the small business outsources their purchasing to another
| company, the "envelope from" is usually the address of the outsourcing
| company.  This is so that any problems with mail that can't be
| delivered can be dealt with by the outsourcer instead of making the
| small business having to deal with it.  However, the "from" address of
| the letter head and/or the "From: header" will be that of the small
| business.
| 
| The SPF records that the small business created deal only with the
| from address of the envelope.  When someone uses SenderID to check the
| wrong from address, they will find that the outsourcer is not allowed
| to use the small business's address, which is wrong.
| 

The Sender ID answer to this is: the outsourcing company
should add a "Sender" header which points to them.  Then the
small business's "From" won't be used as the target of the PRA.

I don't think this is an unreasonable change to ask for, and
it is common to all 2822 authentication schemes.  The above
scenario would be a problem for DK, too.

So I think that any time you need to make a change, the
question is whether the change is reasonable.  If SRS is
reasonable, surely adding a "Sender" header is also
reasonable.