spf-discuss
[Top] [All Lists]

Re: [spf-discuss] Re: DKIM-SSP integration SPF

2006-08-14 06:08:38

----- Original Message -----
From: "Alex van den Bogaerdt" <alex(_at_)ergens(_dot_)op(_dot_)het(_dot_)net>
Newsgroups: spf.-.sender.policy.framework.discussion
To: <spf-discuss(_at_)v2(_dot_)listbox(_dot_)com>
Sent: Monday, August 14, 2006 8:36 AM
Subject: Re: [spf-discuss] Re: DKIM-SSP integration SPF


When considering SPF+DKIM, I think the most important question to
answer first is "What does SPF bring to the table that DKIM does not?"
The most obvious answer is "Ability to reject messages without reading
them."

Anything else?

I think you are correct.

SPF is for RFC821.  DKIM is for RFC822.  Mixing the two would be a
mistake.

Correct, But technically we are not mixing the two in this form of analysis.

Do you have 100% trust in SPF-FAIL or SPF-PASS?

Not many do.  The SPF forwarding problem remains to be its #1 thorn on its
side and the DKIM promoters are using this as its strategic marketing
advantage.

The fact is that there will be many implementators who will most definitely
lump the two in form or fashion.  Microsoft is already saying SENDER-ID and
DKIM compliment each other.  But no one is saying in what ways.

Some will do the hard results and accept it as it, some will use it as a
weight to reduce false positives and false negatives.

But I am not concern with the implementation part of it. The approach here
is to look at the "total information" that might be available to you.   It
is an picture of what are the expectations.

A good way to explain this is if you got a SPF-FAIL reject, will you fill
100% better if the was also a DKIM-FAILURE with it?

What if you got a SPF-PASS?  In theory should a DKIM-PASS increase the
trust?  Would a DKIM-FAIL lower the trust?

The question you have:

    "What does SPF bring to the table that DKIM does not?"

is in my opinion, already know.  One is a IP concept, the other is a DOMAIN
concept.

But when I have to add DKIM into our product suite, I would like to be able
to tell customers why they need to keep SPF turned on and possibly tell them
how SPF and DKIM help each other.

Can DKIM help SPF solves its forwarding problem?

--
Hector Santos, Santronics Software, Inc.
http://www.santronics.com














-------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com