Re: "If you believe that the SPF concept is fundamentally flawed, please subscribe at http://www.imc.org/ietf-mxcomp/"

Richard Clayton wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> In article <[email protected]>, wayne
> <[email protected]> writes
> 
> 
>>In <[email protected]> Richard Clayton <[email protected]> 
>>writes:
>>
>>
>>>Hence, since they still want to spam, they will start sending email with
>>>borrowed domains from borrowed machines...  they are already doing the
>>>latter, they don't do the former because there's currently no need.  SPF
>>>would, if adopted, provide the evolutionary pressure for them to do so.
>>>
>>>Of course you may feel that if [email protected] is so dumb as to install
>>>a spam-sending trojan that it serves him right if example.com gets a
>>>really bad reputation. However, if I have a need to swap email with
>>>example.com employees how exactly has SPF improved the situation here ?
>>
>>example.com can quickly update their SPF record to remove the
>>offending IP address from their approved list.
> 
> 
> fair enough -- but this is reactive and the reputation service will have
> been complained to at the same time, possibly well before, example.com
> learnt of the problem. The reputation of example.com (which apparently
> SPF is going to allow me to judge) will still suffer.
> 
> or are you expecting the reputation not to be for example.com but for
> each individual part of it...   if so then I'm still unclear what SPF is
> bringing to the party here. 
> 
> now consider where example.com is a large company (or an ISP) running a
> small number of mail servers then (a) the action is NOT going to be to
> change the SPF record but to revoke an authorisation and (b) it's even
> more opaque as to how the reputation service can reflect that this has
> been done or quite what SPF has contributed
> 
> 
> once again, I don't mind SPF being promoted for what it will do, but
> when it is argued that other things will flow from that then the
> justification really doesn't seem to stand up.
> 
> I repeat my advice from another place to give up proselytising how SPF
> will make a better world and just concentrate on a comprehensible,
> interworkable standard that doesn't break anything else. If it then
> turns out to have magical powers and cures cancer and stuff then that's
> peachy. But its unnecessary to promote that up front.

Please point me to this "comprehensible, interworkable standard that 
doesn't break anything else. "  (Isn't that the FUSSP?)

Meanwhile, I am betting on SPF.

Terry

> 
> - -- 
> richard                     richard.clayton  @  h i g h w a y m a n . com
> 
> "Assembly of Japanese bicycle require great peace of mind" quoted in ZAMM
> 
> -----BEGIN PGP SIGNATURE-----
> Version: PGPsdk version 1.7.1
> 
> iQA/AwUBQpYbLJoAxkTY1oPiEQJ2xQCgoA/MSyIgMRnBKeVsyscCJuFW4vgAn0ag
> WmLALimrRXuZvrDwyiqLmP8i
> =C5i1
> -----END PGP SIGNATURE-----
> 

-- 
Terry Fielder
[email protected]
Associate Director Software Development and Deployment
Great Gulf Homes / Ashton Woods Homes
Fax: (416) 441-9085