Re: VGER does gradual SPF activation (FAQ matter)

From: Neil Brown
Date: Mon Jun 12 2006 - 06:16:41 EST


On Monday June 12, matthias.andree@xxxxxx wrote:
> On Sun, 11 Jun 2006, Avi Kivity wrote:
>
> > Can't it be corrected by having the thunk.org MTA relay messages from
> > @mit.edu through the MIT MTA? Presumably the MIT MTA will only be open
> > to authenticated users.
>
> That isn't "corrected", but "broken even further".
>
> What difference does it to the authenticity of the message or perhaps
> its envelope make who the postman is and into which mailbox the letter
> is posted?

"A bad analogy is like a leaky screw driver."

Your screwdriver is leaking!

If you get a letter from your aunt in Rome, and it is post-marked
'Moscow', you might doubt the authenticity. If it claims to be from
your swiss bank with the same post mark you would doubt it even more.

I'm not saying that postmarks are a particularly good analogy,
but if I got had a knock on my door (SYN) and opened it (ACK /
SYN-ACK), and the person said
Hi, I'm from the Thunk group (HELO thunk.org) and I have a letter
from Ted at MIT (MAIL FROM: <tytso@xxxxxxx>)
then I'm not sure I would believe them (well, I might, but my butler
shouldn't).

>
> Use something sane please, not SPF.
>
> All the world break their mailers at Wong's command because a half-baked
> idea is raved about without thinking.

"half-baked" - maybe that is appropriate.
I've been thinking lately that SPF is one of those "125mls of water in
a 250ml glass" things.
To some it is half full, to others it is half empty.

It's probably like monolithic kernels - there is no future in it!

NeilBrown

>
> It's bad enough GMX are posting SPF records - I disabled SPF on my
> inbound path, because GMX enable a per-recipient configuration of this
> nonsense - I can't opt out of their posting SPF records though...
>
> There's no need to repeat David's arguments counter to SPF for me.
> David's document says it all.
>
> --
> Matthias Andree
> -
> To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
> the body of a message to majordomo@xxxxxxxxxxxxxxx
> More majordomo info at http://vger.kernel.org/majordomo-info.html
> Please read the FAQ at http://www.tux.org/lkml/
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/