Re: Spammers Skirt IP Authentication Attempts

[Paul Jakma <paul () clubi ie>]

On Mon, 6 Sep 2004, Tom (UnitedLayer) wrote:

> I think SPF is an important step in getting rid of people 
> pretending to be someone else. If you have SPF records, and they 
> match the mail, chances are you are who you say you are.

Not really. For that you need X.509 or PGP and web-of-trust.

Also, SPF doesnt tell you whether it is spam. Indeed, apparently 
majority of SPF-valid email at moment is spam!

> Finding out who you are behind domain records/etc, thats a 
> different story...

SPF is worthless.

Joe-job protection can be done in far better ways, eg SRS.

regards,
--
Paul Jakma      paul () clubi ie        paul () jakma org       Key ID: 64A2FF6A
Fortune:
Zombie processes haunting the computer