Joe Emenaker <[EMAIL PROTECTED]> writes: > How come. Unless you give a bonus to SPF pass, then there's no real > incentive for legit domains to use it (until people start rejecting > SPF fails... ).
We give points to SPF fails, so the incentive (in SpamAssassin) is that forged mail using your domain is more likely to end up in the spam folder. And trust me, there are sites rejecting SPF fails. > The idea that spammers can pass SPF doesn't bother me at all, since I > know that it will make the blacklists that much more effective. You > just need to make sure that you don't give more of a bonus for > SPF-pass than the penalty for being on a RBL. Not quite. You have to take into account spammers registering new domains. Sites will need to build up a positive reputation, putting up a bond, being accredited, or whatever before they can get a bonus. Daniel -- Daniel Quinlan http://www.pathname.com/~quinlan/
