On Thursday 14 December 2006 01:37, Marc Perkel wrote:
> How do you deal with people forwarding email from another domain when
> using SPF?

*If* you intend to reject mail based on hard SPF failures, then you *must* 
allow for exceptions for forwarded mail. Mail can only be forwarded from 
specific hosts, so while it might be tricky it's definitely possible to 
define such exception in a meaningful way.

Demanding that forwarding between arbitrary hosts must simply work (without 
SRS, DKIM or some other mechanism) is to say that everyone must always trust 
the envelope sender and mail header like 20 years ago. That is what is really 
broken.

-- 
Magnus Holmgren        [EMAIL PROTECTED]
                       (No Cc of list mail needed, thanks)

  "Exim is better at being younger, whereas sendmail is better for 
   Scrabble (50 point bonus for clearing your rack)" -- Dave Evans

Attachment: pgpVkJTLMWo1f.pgp
Description: PGP signature

Reply via email to