In
<5(_dot_)2(_dot_)1(_dot_)1(_dot_)0(_dot_)20050510015519(_dot_)042e1d18(_at_)pop(_dot_)mail(_dot_)yahoo(_dot_)com>
David MacQuigg <dmquigg-spf(_at_)yahoo(_dot_)com> writes:
At 11:33 PM 5/9/2005 -0400, Scott Kitterman wrote:
[mailto:owner-spf-discuss(_at_)v2(_dot_)listbox(_dot_)com]On Behalf Of
David MacQuigg
At 08:06 AM 5/9/2005 -0500, wayne wrote:
In <x4br7kvagz(_dot_)fsf(_at_)footbone(_dot_)schlitt(_dot_)net> wayne
<wayne(_at_)schlitt(_dot_)net> writes:
In
<Pine(_dot_)LNX(_dot_)4(_dot_)62(_dot_)0505090119450(_dot_)26914(_at_)sokol(_dot_)elan(_dot_)net>
"william(at)elan.net" <william(_at_)elan(_dot_)net> writes:
--
Without explicit approval of record owner, [...]
I like that. Along with the changes suggested by Julian (and others),
it now reads:
I like this. Seems like it would also nicely handle
SUBMITTER=<domain-name>.
I may be interpreting SUBMITTER wrong, but to me it is an explicit
declaration of the sender's Identity (the one that matches the
sender's IP). I would use that Identity and none other. We probably
need a different keyword here, something like ID= that has no previous
association with a particular method.
SUBMITTER is an explicit declaration made by the sending MTA, which is
not necessarily the domain owner. I do not think it qualifies.
Keep this in mind for the future, but tell me this (assuming you are talking
about the MS Submitter that is part of the anti-forgery technology formerly
known as Sender ID), how do I deal with Submitter without having to sign the
MS license for PRA? There's the rub.
As for using the Identity declared in SUBMITTER=, that shouldn't
require any license. I think you only need a license if you want to
implement the PRA algorithm.
That is my understanding also. The (updated) patent is mostly about
the PRA. Before touching anything with the MARID protocols, it might
be a good idea to double check though.
If you treat the declared Identity as
simply a domain name to be authenticated against an IP address, you
can use SPF or whatever method you like.
Yeah, treating the SUBMITTER value as a declared identity has been
discussed. While I think it has some merit, it was never part of
SPF-classic. If a domain owner wants to allow for the use of
SUBMITTER as a declared identity, it should make an explict
declaration of such.
-wayne