spf-discuss
[Top] [All Lists]

Re: using received headers to determine sending mta

2005-01-12 13:28:39
On Wed, Jan 12, 2005 at 06:09:05PM -0000,
 Chris Haynes <chris(_at_)harvington(_dot_)org(_dot_)uk> wrote 
 a message of 34 lines which said:

Only if you trust that MTA!

Come on, this is becoming ridiculous (and has been rebutted several
times on that list). If you cannot trust the last MTA, then stop
reading email.

And if the 'latest received header' was inserted by someone you have
no knowledge of / control over(e.g. a forwarder) then you really
would be at risk.

Impossible since every MTA must insert a Received (RFC 2821, 4.4,
"Trace Information").

So, the most recent Received has always been added by a machine you
trust.