On Wed, Aug 30, 2006 at 02:45:02AM +0200, Frank Ellermann wrote:
2821-compliant MTAs send DSNs if at all to the originator.
Ignore the part about "as indicated by the Return-Path",
that's obviously nonsense today.
Unless it got an SPF PASS, or you're otherwise sure that
the Return-Path is okay, or you're sure that you don't
need to send any unsolicited DSN later.
One would think that most people on this list do not need to
be convinced of this...
"SPF is ushering in a new set of anti-spam systems, where email
is spam unless proven otherwise. Accuracy will be critical."
This means there is no trust in the return path anymore, unless
proven otherwise.
Sending DSNs (or auto replies, vacation messages, challenges) to
unverified sender addresses is abuse in my book as well.
(sending challenges is abuse even when sent to verified addresses,
but that's another topic).
Hurray for spamcop.
-------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com