On 09/22/2011 11:41 PM, Henno Täht wrote:
> What do you think about shipping SRS along with SPF (once Heiko finishes
> his work). Those two should go hand-in-hand in my view. No?
> 
> Henno

Right, but the issue remains: if some forwarders that *you do not
control* are failing to implement SRS, you're dead anyway. SPF is bad by
design, and DKIM is much much better, as Wietse Venema pointed out.

For example, I have a zigo at debian email, which is only a forwarder. I
do not control the forwarder at debian.org, and people often send me
email to that address. Unfortunately, when someone has SPF fields, the
mail never reaches me, since debian doesn't implement SRS. I really
doubt that any DAM will want to implement SRS: I'm almost sure that they
will tell me that SPF sux because of the above (the forwarder, which
might not be doing SPF filtering, and which you don't control, might not
support SRS, which leads to issues you will never be able to solve). And
I would agree that this fact sux.

DKIM doens't suffer from such issues.

Cheers,

Thomas

Reply via email to