spf-discuss
[Top] [All Lists]

RE: Could SPF prevent delivery of Non-SPAM eMail?

2005-02-22 14:39:09
-----Original Message-----
From: owner-spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
[mailto:owner-spf-discuss(_at_)v2(_dot_)listbox(_dot_)com]On Behalf Of Dave 
Warren
Sent: Tuesday, February 22, 2005 3:58 PM
To: spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
Subject: Re: [spf-discuss] Could SPF prevent delivery of Non-SPAM eMail?


Scott Kitterman wrote:

other anti-forgery techniques.


I'm interested in that.

Would you please enumerate them for me?


http://david.woodhou.se/why-not-spf.html has a brief summary with links
which you can follow for more information.

The problem for those of us who are domain owners, but not mail server
operators is that none of the alternatives are ready for us today.


DomainKeys can be implemented entirely on the client-side (as far as
signing, your DNS server still needs to support the appropriate records
of course)

Yes, it CAN be implemented on the client side, but has anyone done it yet?
At their sourceforge page:

http://domainkeys.sourceforge.net/

it's all downloads for MTAs.  I have looked and thus far been unalbe to find
an MUA based program that's available for Domainkeys.  I'd be interested in
pointers....

SPF can be implemented as a domain owner as long as your mail server
supports SPF on their own servers, you just use the "include" directive.
If your mail server operator doesn't offer SPF, you need to harass them
until they do, or get the IP ranges they own and list those.

Yes, I understand that.  I was complaining about the lack of alternatives.


Scott Kitterman