Re: Trouble with Sender Authentication
Scott Kitterman <[email protected]> Wed, 8 Nov 2006 23:30:47 -0500
| Newsgroups | gmane.ietf.mxcomp |
|---|---|
| Organization | Kitterman Technical Services |
| Message-ID | <[email protected]> |
On Wednesday 08 November 2006 14:36, Douglas Otis wrote: > On Nov 8, 2006, at 10:10 AM, Scott Kitterman wrote: > > On Wed, 8 Nov 2006 09:15:29 -0800 Douglas Otis <dotis@mail- > > > > abuse.org> wrote: > >>> When you say the word script, do you mean SPF records (Please, > >>> this is meant to be a yes/no question, there's no need to write a > >>> dissertation that repeats the arguements made earlier in the > >>> thread. I read those already.)? > >> > >> The concern is with libraries that execute scripts labeled as SPF > >> 1 or 2 contained within DNS resource records. A potential attack > >> utilizing just the access of these resources records has not been > >> described. > > > > Is that a Yes? > > This has been succinctly answered. Record is _not_ synonymous with > script. > OK, then I guess that's no. Record != Script. I see from the above that in your view libraries execute scripts, so SPF checking library != Script. I'm not sure what is left. Rather that rehash your 'succinct' answer, please point me to the page and line number(s) of your draft that either is a script or describes what it is and I'll look it up there. Scott K