Stuart D. Gathman wrote:
Ultimately, some bozo will file suit when their identity is stolen
because they responded to an SPF FAIL message from their bank.
The courts will decide for whoever has the most money for lawyers
(hopefully the bank in this case), but we can certainly discuss
what the decision *ought* to be.
The bank would feel more comfortable with "standards track" than
"experimental" in this case, assuming that the careless receiver
pulls that as excuse, and the court is willing to accept it.
Technically the difference is zilch, nobody is forced to check SPF,
to publish FAIL, or to reject FAIL, no matter what the status of
the RFC is, but when lawyers enter the picture it can get weird.
Frank
-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Archives: http://v2.listbox.com/member/archive/735/=now
RSS Feed: http://v2.listbox.com/member/archive/rss/735/
Modify Your Subscription:
http://v2.listbox.com/member/?member_id=2183229&id_secret=84584359-b9d6a0
Powered by Listbox: http://www.listbox.com