On Tue, 14 Nov 2006 18:36:15 +0100 Julian Mehnle <julian(_at_)mehnle(_dot_)net>
wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Jon Grant wrote:
One query I thought of over night was:
We are essentially hoping that other servers run SPF right? and if we
get an email from a server which isn't checking SPF do we have a way to
know that?
No. But we can still do our own SPF checking, and if the forwarder (here:
Paypal) hasn't rewritten the sender address to be in their own domain,
there's a high probability that the SPF check will fail (and rightly so).
Then today I got this genuine bounce email below, for a Paypal
transaction I made! What a coincidence right! Maybe to be expected as
my ISP finally applied my SPF settings to jguk.org's DNS
Now the problem is because Paypal are putting my own email address in
the from field...?
Absolutely, that's Paypal's fault.
Almost two years ago Paypal fixed this. Sounds like time to bug them
again...
Scott K
-------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to http://v2.listbox.com/member/?list_id=735