Jo Rhett escreveu:
> On May 21, 2008, at 2:49 PM, Leonardo Rodrigues Magalhães wrote:
>
>> One thing that i found REALLY bad about dkim is that the reputation
>> thing should be manually configured and not 'learned' or 'grabbed'
>> somehow from somewhere, just like SPF records that are DNS
>> published. On
>> SPF approach, everyone can easily grab the domain sending machines
>> because this is DNS published. With DKIM, unless the admin manually
>> configured something, it cannot be used that automated way.
>>
>
> You are misunderstanding something. DKIM is published in DNS TXT
> records exactly the same as SPF.
>
>
no i didnt.
if the message is DKIM-signed, then some checking process can use
the selector present in message headers for grabbing the TXT record and,
then, check if everything is OK.
If the message is NOT DKIM-signed, then the verifier cant do
anything at all, unless it's manually configured for that.
This is different from SPF. In SPF there's no need at all of some
information being appended on the message headers. Based simply on the
domain from the originating address, processes can grab the SPF TXT
record and then validate it.
--
Atenciosamente / Sincerily,
Leonardo Rodrigues
Solutti Tecnologia
http://www.solutti.com.br
Minha armadilha de SPAM, NÃO mandem email
[EMAIL PROTECTED]
My SPAMTRAP, do not email it
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
