spf-discuss
[Top] [All Lists]

Re: Attacking Domain Keys

2004-11-26 07:41:05
On Fri, 2004-11-26 at 09:32 -0500, Theo Schlossnagle wrote:
Back to one of David's point: the math clearly shows that doing DK 
_before_ something like spam assassin make perfect sense as it less 
expensive computationally by several orders of magnitude.

James also had a good point in reply -- that with throwaway domains,
spammers can send mail with a good DK signature. For those domains which
haven't yet got either a good or bad reputation, you do still need to do
the spam checking.

On the other hand, you can skip the spam checking for known bad domains
before even bothering with DK, and you can skip it for known good domain
after checking DK.

-- 
dwmw2


<Prev in Thread] Current Thread [Next in Thread>