On Fri, 2005-10-21 at 15:09 -0400, Stuart D. Gathman wrote:
SPF is designed to detect FORGERY - not spam! (how many times do
we need to repeat that?). If you are using SPF result as part of
a bayesian filter to detect spam (as I am), you'll find that an SPF pass is
actually a weak indicator that the message is spam - due to the enthusiastic
adoption of SPF by spammers with throwaway domains.
Well said (again!), Stuart. While we're saying it again, I think it
should be pointed out that SPF adoption by spammers would help a
reputation service, but unfortunately the "throw-away domains" would
keep that from being completely effective. But the use of throw-away
domains by spammers (or anyone) have nothing to do with the
effectiveness of SPF to prevent cross-domain forgery.
--
Andy Bakun <spf(_at_)leave-it-to-grace(_dot_)com>
-------
Sender Policy Framework: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com