On Tue, 30 Jan 2007 Dan_Mitton(_at_)Notes(_dot_)YMP(_dot_)GOV wrote:
Ok, so does this also imply that the 'MAIL FROM' should be checked by SPF,
but that the 'From:' header should NOT be checked by SPF?
Yes. That is exactly what SPF RFC4408 says.
SPF is a protocol focusing on validating SMTP session input data.
The data that MUA (normal mail client end-users use) processes is
an email content data (composed of email header with multiple fields
such as "From:" and a body which maybe composed of multiple MIME parts).
MUA can only found about SMTP data if MTA added this info in - in
case of MAIL FROM, last such data should be added to the very top
of the header data in "Return-Path" field.
--
William Leibzon
Elan Networks
william(_at_)elan(_dot_)net
-------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?list_id=735