Stuart D. Gathman wrote:
On Wed, 22 Jun 2005, Hector Santos wrote:
In short, if they don't do a MFROM check and don't correct this with a 2822
Return-Path check, then their Sender-ID implementation is broken.
Since their software runs in the MUA, they are probably counting on
the MTA doing an MFROM check before it ever gets to the MUA.
*probably* is purely supposition. And since MS resisted embracing SMTP
time checks in MARID or since, I doubt your assumption is correct.
This is
completely reasonable.
And reasonable has no bearing on MS. What makes money, what gives them
ability to corner marketshare, that is what they will do. Good
programming and technique is irrelevant to them (look around at all the
other MS software, almost *everything* they sell is a good example of that).
The only unreasonable thing they are doing is using SPF classic records
for PRA checks.
And pretending that PRA checks actually mean something or resolve an
issue, and forgetting to notice the *many* things (lists, intentional
forgeries) that PRA FAILS/PASS's that should not.
--
Terry Fielder
terry(_at_)greatgulfhomes(_dot_)com
Associate Director Software Development and Deployment
Great Gulf Homes / Ashton Woods Homes
Fax: (416) 441-9085