Go through and replace everyone with a lot of people. And you can replace the we at the bottom with "members of this mailing list".
If your business partner uses ~all then you'll quickly decide not to whitelist them or tell them to not be so lazy. Why are we so hung up on RFC compliance. When it comes to SMTP it's time to make HUGE revisions. I'm sick and tired of us sticking with a broken mail protocol in the name of RFC compliance. Why are you saying the From field has some legitimize today? The only thing I trust as legitimate is what IP address my mail server accepted the message from. Steve Evans SDSU Foundation -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Scharff Sent: Saturday, September 11, 2004 3:31 PM To: Exchange Discussions Subject: RE: SPF Warning > That's probably going to end up being one of the biggest advantages of > SPF. Whitelisting business partners just based on domain. Right now if > I want to reliably white list [EMAIL PROTECTED] I'd have to match against > IP address also. With SPF you can just rely on the partner to have > their SPF records correct. Where's the reliability if that partner's "correct" SPF record includes ~all or ?all and you've whitelisted their domain. > What I don't get is everyone is saying SPF sucks because it isn't going > to stop all spam. Define everyone. That isn't what I've been saying and I don't believe that's what D�j� said. >Well XP SP2 isn't going to stop all worms but it > still has a lot of good anti-worm features to it. Does XP SP2 break RFC complaint applications? >All SPF is going to > do is make the From field somewhat legitimate. The From field is 'somewhat' legitimate today. How much more or less the >From field is under SPF is one of the points of contention IMO. >So at least we can say > when it comes from @aol.com, or @microsoft.com, we know that those > companies have authorized it at a basic level. Who is "we"? A typical end user? They'll have no idea whether or not a company has published such a record, what the parameters are of that record, of any filtering their mail host does on inbound messages based on that record and n other criteria. How much more credible or reliable should a message which passes the filters be considered by the recipient? _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
