[73844] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Spammers Skirt IP Authentication Attempts

daemon@ATHENA.MIT.EDU (Paul Jakma)
Mon Sep 6 13:48:49 2004

Date: Mon, 6 Sep 2004 18:45:00 +0100 (IST)
From: Paul Jakma <paul@clubi.ie>
To: Peter Corlett <abuse@cabal.org.uk>
Cc: nanog@nanog.org
In-Reply-To: <chhjot$etp$1@dopiaza.cabal.org.uk>
Errors-To: owner-nanog-outgoing@merit.edu


On Mon, 6 Sep 2004, Peter Corlett wrote:

> I'm an advocate of SPF, but not because it's the magic bullet that 
> stops spam. It does however allow innocent domains to say "no, I 
> didn't send that" and thus avoid the double-bounced backwash from a 
> spammer forging their domain as the sender.

Envelope "cookie" schemes on outbound email, like SRS, can achieve 
that, far better (*you* know whether the bounce is legit, rather than 
relying on the bouncer to do the checking) and without the collateral 
damage of SPF.

regards,
-- 
Paul Jakma	paul@clubi.ie	paul@jakma.org	Key ID: 64A2FF6A
Fortune:
The American Dental Association announced today that most plaque tends
to form on teeth around 4:00 PM in the afternoon.

Film at 11:00.

home help back first fref pref prev next nref lref last post