spf-discuss
[Top] [All Lists]

[spf-discuss] Re: Revising SOFTFAIL

2008-01-06 04:54:27
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

David Woodhouse wrote:
Will they do that even for individual localparts (which SPF does
support), i.e., will they say
"HELO julian._.mehnle.net.mailout.isp.com"?

It would be theoretically possible for them to do so, although I find
it unlikely that many would. I'm not aware that SPF can do that.

If the sender enforces submission rights (RFC 4409, 6.1) and declares that 
he is doing so by saying "op=auth" (draft-ellermann-spf-options, 3.4) in 
their SPF record, you can take the localpart for granted.

http://tools.ietf.org/html/rfc4409#section-6.1
http://www.openspf.org/svn/project/specs/drafts/draft-ellermann-spf-options-01.txt

Of course the localpart can be a factor in the calculation of the
authentication result, but I know of no way that you can force a
recipient to make a distinction between the reputation of
'foo(_at_)domain(_dot_)com' and the reputation of 'bar(_at_)domain(_dot_)com' 
short of
disowning one or the other.

True, there's no way to force receivers.  If they insist, they can always 
choose to track reputation using only the coarsest granularity possible.  
But it's always good to give them the _option_ to use a finer 
granularity.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHgMD4wL7PKlBZWjsRAlqzAKCLRbE5SgSpijSqRi5hIUlwmn/qxwCfVvEl
BCcZt1ndymr+0IVllt4pa58=
=iAKz
-----END PGP SIGNATURE-----

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Archives: http://v2.listbox.com/member/archive/735/=now
RSS Feed: http://v2.listbox.com/member/archive/rss/735/
Modify Your Subscription: 
http://v2.listbox.com/member/?member_id=2183229&id_secret=82356157-23330d
Powered by Listbox: http://www.listbox.com

<Prev in Thread] Current Thread [Next in Thread>