David MacQuigg wrote:
Hi Stuart, I appreciate the one positive suggestion in this entire
discussion.
<snip>
It might actually be useful if the "ID" command mentioned what
authentication protocols were supported for existing identities rather
that introducing yet another identity.
E.g.:
EHLO mailserver7.bigforwarder.com
ID SPFv1,SenderID
MAIL FROM:<bob(_at_)sales(_dot_)some-company(_dot_)com>
OK. This will work. It's not as useful as what I have proposed, but
it's a step in the right direction, and I can support it.
Does everyone agree this would be useful?
Absolutely not, no matter what you call it, that is information from the
connecting MTA, which cannot be trusted.
If you wanted to stick that information on a DNS record or something
that one looks up for the domain the email is claiming to come from (or
for the connection HELO name if doing HELO checking), then fine. But
anything passed in with the email from the connecting MTA *CANNOT BE
TRUSTED*.
Am I missing something here???
If we could trust the connecting MTA, we wouldn't need SPF/CSV/whatever.
Terry
It has already been pointed out that SPF records could list addition
identity checks supported as a modifier (useful if you always check
SPF first).
A sender not using SPF will not have any SPF record, even one telling us
what other identities to check.
--
Dave
************************************************************ *
* David MacQuigg, PhD email: david_macquigg at yahoo.com * *
* IC Design Engineer phone: USA 520-721-4583 * * *
* Analog Design Methodologies * * *
* 9320 East Mikelyn Lane * * *
* VRS Consulting, P.C. Tucson, Arizona 85710 *
************************************************************ *
-------
Sender Policy Framework: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Read the whitepaper! http://spf.pobox.com/whitepaper.pdf
To unsubscribe, change your address, or temporarily deactivate your
subscription, please go to
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
--
Terry Fielder
terry(_at_)greatgulfhomes(_dot_)com
Associate Director Software Development and Deployment
Great Gulf Homes / Ashton Woods Homes
Fax: (416) 441-9085