-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Scott Kitterman wrote:
On 03/06/2006 11:51, Frank Ellermann wrote:
Scott Kitterman wrote:
I think I missed something....
What was Keith's proposal?
<http://permalink.gmane.org/gmane.mail.spam.spf.discuss/20672>
| p.s. I am personally of the opinion that SPF in all but a few corner
| cases is harmful to the interoperability of Internet mail, so I'm very
| keen to have those limitations documented.
He wrote that in other words already last year, the idea is to
document why PRA is broken (and above all breaks v=spf1) in an
Internet draft. E.g. merging some texts in my link collection
<http://purl.net/xyzzy/home/test/senderid-appeal.htm#SPF>
OK. I didn't read that e-mail as thinking PRA was broken. I read it as he
thinks SPF period is harmful (he's not alone in that opinion).
True, SPF sets out to close a commonly used and misused hole in the SMTP
spec. By definition this will be considered broken by the people
effected since what they are doing is not a technical violation of the
SMTP spec.
The reason the project still exists, and SPF is seeing relatively common
use today, is that the breakage from SPF is less than from e-mail
forgery and from other attempted solutions to e-mail forgery.
I'm still waiting for someone, anyone, to come up with an e-mail
source forgery prevention mechanism superior to SPF. I would say PGP/GPG
is the perfect solution, but look at your inbox and mail client and tell
me it is more widespread than SPF despite having been available for
over 10 years now and solving more problems than SPF attempts to.
- --
Daniel Taylor
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFEDeJo8/QSptFdBtURAnU2AJ0cYlePyzVliUCAzvmJIMdLHJ6I9gCdFrtH
QafaOGyDYkDgtQ+FKoW3sXk=
=jdaL
-----END PGP SIGNATURE-----
-------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com