On Tue, 20 May 2008, Jeff A. Earickson wrote:
>> With your current setup, they can actually send out a DKIM signed
>> mail with your email address in the From: header.  Is that a good idea?
>
> Are you saying that there is a fix here?  Email To/From lines can
> be easily forged, ie "Joe Job".  Anybody can do a DNS lookup of our
> TXT fields for colby.edu; that's why it is in DNS.  If you have
> a suggested improvement or if I've got something misconfigured,
> then I am listening...

I think the common suggestion is to have your outsourced mail service use 
a subdomain of your domain.  Among other things, if what they send is 
reported as spam, your main domain is immunized somewhat from the 
repercussions.

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft 
Defy all challenges. Microsoft(R) Visual Studio 2008. 
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
dkim-milter-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss

Reply via email to