spf-discuss
[Top] [All Lists]

Re: Conflict with challenge/response filters

2005-07-06 08:09:38
Hello!

On Tue, Jul 05, 2005 at 06:43:02PM -0400, Stuart D. Gathman wrote:
On Wed, 6 Jul 2005, Julian Mehnle wrote:

Interesting time machine... ;-)

C/R systems are bad, period.

When the C/R system does not first check SPF or otherwise ensure that
the return path is not forged (domain keys, whatever), then it
is a form of mail abuse second only to virus scanners that send warnings
with non-empty MAIL FROM to the return path.

Now, one could enforce the standards more strictly, i.e.
accept mail to non-SRS/SES addresses only from *non*-empty envelope
froms, and accept mail to SRS/SES addresses only from empty envelope
senders.

At least I interpret RFC 2821 in a way that that would be legal.

[...]

Kind regards,

Hannah.