Re: misconception in SPF
"John Levine" <[email protected]>
| Newsgroups | gmane.ietf.asrg |
|---|---|
| Message-ID | <[email protected]> |
>...so the "vulneravility" exists ! may be spammers don't know it yet ! >don't you believe that a phish with these characteristics could be >worse than other? No, I don't see any reason to think that www.paypal.com is more likely to fool users than paypaI.com. Because of the way that Paypal uses Akamai to distribute its load, adding a TXT record to www.paypal.com would be rather difficult. SPF has been around for about a decade. If this hack were useful, I think we can assume that spammers would use it. R's, John