On Thu, 10 Jan 2008, Julian Mehnle wrote:
Then, who should be held responsible for the consequences of
delivering FAILed messages to an end user?
Who cares as long as it's not the owner of the domain that was forged?
It's not for the domain owner or for _us_ to assign responsibility for
that case.
Ultimately, some bozo will file suit when their identity is stolen
because they responded to an SPF FAIL message from their bank.
The courts will decide for whoever has the most money for lawyers
(hopefully the bank in this case), but we can certainly discuss what the
decision *ought* to be.
--
Stuart D. Gathman <stuart(_at_)bmsi(_dot_)com>
Business Management Systems Inc. Phone: 703 591-0911 Fax: 703 591-6154
"Confutatis maledictis, flammis acribus addictis" - background song for
a Microsoft sponsored "Where do you want to go from here?" commercial.
-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Archives: http://v2.listbox.com/member/archive/735/=now
RSS Feed: http://v2.listbox.com/member/archive/rss/735/
Modify Your Subscription:
http://v2.listbox.com/member/?member_id=2183229&id_secret=84336419-3ca9f9
Powered by Listbox: http://www.listbox.com