Re: Scope of SMTP Verify

William Leibzon <[email protected]> wrote:
> While I do not 
> particularly like LMAP, it does seem that if this is adopted the same or
> very simiilar syntax can be used to add records to reverse dns IN-ADDR zones
> Things you may want to indicate there include:
> 1. If the ip (or ip block) can be source of SMTP traffic or not. Possibly 
>    even more specifically on what authentication is to be used (i.e. AUTH, 
>    STARTTLS)

  That's pretty much the MTA-MARK proposal.

> 2. What domain(s) can be used for envelope from when email is being sent 
>    from that ip (negative consequence: spammer can also see this record 
>    and may well choose to forge emails as coming from that domain)

  Not if that domain also publishes LMAP records.

  That was my proposal from last week, and it neatly solves the
biggest objection to LMAP.

> 3. If ip is particular to certain server or user, the record may indicate
>    public key and all legitimate emails sent from that PCs should then 
>    have been signed by private key associated with that public key

  Which is pretty much the DK proposal.

  None of this is new.

  Alan DeKok.