North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Spammers Skirt IP Authentication Attempts

  • From: Paul Jakma
  • Date: Tue Sep 07 06:37:08 2004


On Mon, 6 Sep 2004, Tom (UnitedLayer) wrote:


I think SPF is an important step in getting rid of people pretending to be someone else. If you have SPF records, and they match the mail, chances are you are who you say you are.

Not really. For that you need X.509 or PGP and web-of-trust.


Also, SPF doesnt tell you whether it is spam. Indeed, apparently majority of SPF-valid email at moment is spam!

Finding out who you are behind domain records/etc, thats a different story...

SPF is worthless.


Joe-job protection can be done in far better ways, eg SRS.

regards,
--
Paul Jakma	[email protected]	[email protected]	Key ID: 64A2FF6A
Fortune:
Zombie processes haunting the computer