spf-discuss
[Top] [All Lists]

RE: [spf-discuss] Virus Expert says: virus that no longer forge email breaks SPF

2005-10-10 13:55:24

-----Original Message-----
From: wayne [mailto:wayne(_at_)schlitt(_dot_)net]
Sent: maandag 10 oktober 2005 18:45
To: SPF discussions
Subject: [spf-discuss] Virus Expert says: virus that no
longer forge email breaks SPF




Well, Nick Fitzgerald told a bunch of people at a virus conference
that SPF can be easily broken by virus writers by having them no
longer forge email addresses.

So, in other words, at a virus conference Nick Fitzgerald basically
admitted that forging email addresses is a practice effectively killed by
SPF; and to such a degree of success even, that if spammers want to
continue to spam, they will have to use non-forged addresses. And this is
bad, how? :) I'd say it's a major step in the right direction.

It is, in fact, by far and large, the whole purpose of SPF. It's what I
call the SPF 'funnel' effect: instead of picking from a free-for-all batch
of domain names, spammers are forced through a funnel of legitimacy; wich
is to say, whatever goes in, at the 'mouth' of the funnel only non-forged
identities can come out.

If Nick Fitzgerald does not grasp the significance, and desireability, of
this positive development, then what else is there to say?

- Mark 
 
        System Administrator Asarian-host.org
 
---
"If you were supposed to understand it,
we wouldn't call it code." - FedEx

-------
Sender Policy Framework: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com