I acknowledge that Yahoo is BIG and that this will give YASAF some considerable momentum. But this alone certainly doesn't make YASAF the technically superior solution against sender address forgery.
Both of them provide equivalent authentication of the sender's address. SPF will break when mail is forwarded. YASAF won't. The logical conclusion is that YASAF is a technically superior solution.
[...] Sure. Now, explain why [SPF] isn't already being used universally? Why doesn't Yahoo simply implement it?
I can't. Please ask Yahoo. And please also ask them why YASAF isn't already being used universally. And why has nobody else yet implemented YASAF?
They have not published it. The Reuters report indicates that they are working on a toolkit that they intend to give away to everyone, and they estimate that they will complete the work sometime before May.
pgp00000.pgp
Description: PGP signature
