spf-discuss
[Top] [All Lists]

Re: Avoiding the DNS Hunt

2005-05-20 10:05:31


David MacQuigg wrote:
Hi Stuart, I appreciate the one positive suggestion in this entire discussion.
<snip>
It might actually be useful if the "ID" command mentioned what
authentication protocols were supported for existing identities rather
that introducing yet another identity.

E.g.:

     EHLO  mailserver7.bigforwarder.com
     ID SPFv1,SenderID
     MAIL FROM:<bob(_at_)sales(_dot_)some-company(_dot_)com>


OK. This will work. It's not as useful as what I have proposed, but it's a step in the right direction, and I can support it.

Does everyone agree this would be useful?

Absolutely not, no matter what you call it, that is information from the connecting MTA, which cannot be trusted.

If you wanted to stick that information on a DNS record or something that one looks up for the domain the email is claiming to come from (or for the connection HELO name if doing HELO checking), then fine. But anything passed in with the email from the connecting MTA *CANNOT BE TRUSTED*.

Am I missing something here???

If we could trust the connecting MTA, we wouldn't need SPF/CSV/whatever.

Terry



It has already been pointed out that SPF records could list addition
identity checks supported as a modifier (useful if you always check
SPF first).


A sender not using SPF will not have any SPF record, even one telling us what other identities to check.

--
Dave
************************************************************     *
* David MacQuigg, PhD     email: david_macquigg at yahoo.com     *  *
* IC Design Engineer            phone:  USA 520-721-4583      *  *  *
* Analog Design Methodologies                                 *  *  *
*                                 9320 East Mikelyn Lane       * * *
* VRS Consulting, P.C.            Tucson, Arizona 85710          *
************************************************************     *


-------
Sender Policy Framework: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Read the whitepaper!  http://spf.pobox.com/whitepaper.pdf
To unsubscribe, change your address, or temporarily deactivate your subscription, please go to http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com


--
Terry Fielder
terry(_at_)greatgulfhomes(_dot_)com
Associate Director Software Development and Deployment
Great Gulf Homes / Ashton Woods Homes
Fax: (416) 441-9085


<Prev in Thread] Current Thread [Next in Thread>