On Wed, 10 Nov 2004, wayne wrote:
So, if exmaple.com outsources some of its email to
online-billing-outsourcer.com, they have to get a valid an SES key to
them.
No. It would be better for the ESP to use their own key with either their
own domain or a special subdomain of example.com.
Similarly, if exmaple.com allows certain people to work from home,
those people either are forced to go through example.com's MTAs, or
somehow there needs to be a key (and SES software) given to the
employee. With SPF+SRS, they can simply list that home user in their
record.
SMTP AUTH is easy to set up and generally preferable to relying on a
consumer ISP's shoddy relays. Adding those relays to your SPF record is a
really dumb idea because it makes forgery of your domain much easier.
Users also prefer SMTP AUTH because they can configure their software once
and use it anywhere (home or work) whereas if it is unavailable they have
to reconfigure twice a day.
Tony.
--
f.a.n.finch <dot(_at_)dotat(_dot_)at> http://dotat.at/
MALIN HEBRIDES: NORTHEAST 4 OR 5 INCREASING 6. RAIN LATER. GOOD BECOMING
MODERATE.