On Mon, Jan 29, 2007 at 10:44:15AM -0500, jonc wrote: > > On the bright side, if we move to T-SMTP (requiring authenticated SMTP > drop offs) then you could trace the phisher back to his vessel and then > rock his boat.
Not really. The phisher isn't going to do things right, he'll just pretend he's forwarding a message that was originally authenticated by some random joe. Same as they forge Received headers now. It'll catch zombies that send through the smarthost, though. -- TriLUG mailing list : http://www.trilug.org/mailman/listinfo/trilug TriLUG Organizational FAQ : http://trilug.org/faq/ TriLUG Member Services FAQ : http://members.trilug.org/services_faq/
