wayne wrote:
steps should be taken to prevent cross-customer forgery, such
as the use of SMTP AUTH [RFC2554].
SMTP AUTH alone doesn't help, it has to be the MAIL FROM AUTH
in 2554, or the enforced submission rights in 2476. Maybe say
"see also" adding 2476 instead of "such as" etc. AFAIK it's
already in draft-hutzler-spamops-04, and that draft goes for
BCP supported by the ASRG. Or maybe reference draft-hutzler:
<http://xml.resource.org/public/rfc/bibxml3/reference.I-D.hutzler-spamops.xml>
Bye, Frank