On Wed, 2005-01-12 at 18:54 +0100, jpinkerton wrote:
Sure - this method is only used after normal SPF checks don't produce
a Pass. Recipients can choose how deeply they want to go through the
headers - bearing in mind that they can all be forged.
Actually I don't think this is really a problem. Remember, in the SPF
Brave New World every host will be capable of SRS anyway.
It's just as easy for the sending MTA to fake the reverse-path by using
SRS, so it doesn't matter that your solution also allows it to fake
Received headers. SPF is only really about how much you trust the
sending mail server anyway.
--
dwmw2