On Tue, 20 May 2008, SM wrote:

> At 12:59 20-05-2008, Jeff A. Earickson wrote:
>> Are you saying that there is a fix here?  Email To/From lines can
>> be easily forged, ie "Joe Job".  Anybody can do a DNS lookup of our
>> TXT fields for colby.edu; that's why it is in DNS.  If you have
>> a suggested improvement or if I've got something misconfigured,
>> then I am listening...
>
> You can either have a granularity (g= tag) to allow the provider to
> sign mail from a specific email address, e.g. [EMAIL PROTECTED]
> or else have them use a subdomain, e.g. @offers.colby.edu.

Of course, usual logic applies there.  If you set up a subdomain, make 
sure there's an MX for it, make sure it answers, make sure it's got an 
answered abuse box.  Make sure your info really IS opt-in (as a college I 
don't imagine you're a big spammer, but I need to mention it anyway). 
Make sure CYA has done with regard to sale or alternate use of your 
intellectual property.

> The second alternative may be better from a reputation
> perspective.  You can also have the bounces directed to the
> provider's server instead of the colby.edu mail server.

I would actually keep those in house, simply such that you *want* the kind 
of ability to have your provider be accountable.

-Dan

--

"A mother can be an inspiration to her little son, change his thoughts,
his mind, his life, just with her gentle hum."

-No Doubt, "Different People", from "Tragic Kingdom"


--------Dan Mahoney--------
Techie,  Sysadmin,  WebGeek
Gushi on efnet/undernet IRC
ICQ: 13735144   AIM: LarpGM
Site:  http://www.gushi.org
---------------------------


-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft 
Defy all challenges. Microsoft(R) Visual Studio 2008. 
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
dkim-milter-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss

Reply via email to