Re: Devilish: Forget about DNS

Hadmut Danisch wrote:
> On Mon, Feb 09, 2004 at 01:33:21PM -0500, Yakov Shafranovich wrote:
> 
>>Perhaps we should just reformulate the problem as:
>>
>>How do we introduce sender authentication into the email system?
>>
> 
> > Exactly. But until now, by far too many time was wasted to 
> dance around the problem how to find workaround for the 
> flaws and limitations of DNS.
> 

What bothers me is that there are two separate identities at stake here:
1. Identity of the incoming MTA.
2. Sender's identity

These are conceretely separate from each. I do not see a problem with 
doing #1 via DNS which is exactly what XMPP does - tie in the IP address 
of the incoming MTA to a specific domain name. But I do see a problem 
for #2. Therefore, what I was thinking is once you have identitified the 
MTA, why not pass the sender's identity explictly in like in MAIL FROM 
AUTH parameter?

Yakov
-------
Yakov Shafranovich / asrg <at> shaftek.org
SolidMatrix Technologies, Inc. / research <at> solidmatrix.com
"Among all our enemies / The ones to be most feared are often the 
smallest" (Jean de la Fontaine)
-------