| From: | "Marc G(dot) Fournier" <scrappy(at)hub(dot)org> |
|---|---|
| To: | Peter Eisentraut <peter_e(at)gmx(dot)net> |
| Cc: | pgsql-www(at)postgresql(dot)org, Andrew Sullivan <ajs(at)crankycanuck(dot)ca> |
| Subject: | Re: [CORE] SPF Record ... |
| Date: | 2006-11-20 01:59:38 |
| Message-ID: | F9FE33F39C0BC8177BA25B8F@ganymede.hub.org |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-www |
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- --On Sunday, November 19, 2006 21:59:53 +0100 Peter Eisentraut
<peter_e(at)gmx(dot)net> wrote:
> Marc G. Fournier wrote:
>> 'k, so if I start sending emails out as peter_e(at)gmx(dot)net, you'd have
>> no problems with that,
>
> That is completely unrelated to the SPF issue. What you are describing
> is presumably one person impersonating another. But SPF only addresses
> the path that email takes. You can still pretend to be someone else.
Huh?? If gmx.net had an SPF record that stated that only gmx.net and its MXs
were authoritative sources of mail for their domain, and I send something
through hub.org as peter_e(at)gmx(dot)net, the receiving server, if it checks/honors
SPF, would end up rejecting it as spam ... the only way it wouldn't is if I
could relay *through* gmx.net (I'm assuming that I can't?) so that not only am
I impersonating you, but I'm doing it in such a way that the SPF record
verifies that it is legit ...
- ----
Marc G. Fournier Hub.Org Networking Services (http://www.hub.org)
Email . scrappy(at)hub(dot)org MSN . scrappy(at)hub(dot)org
Yahoo . yscrappy Skype: hub.org ICQ . 7615664
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (FreeBSD)
iD8DBQFFYQwK4QvfyHIvDvMRAtXtAJwJeI5eZWCDmL4wjiidVUxwKhcZ4wCdEhjt
I9VLt90vSynY3OuTSjQefBQ=
=u+x8
-----END PGP SIGNATURE-----
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Joshua D. Drake | 2006-11-20 03:42:21 | Re: [CORE] SPF Record ... |
| Previous Message | Marc G. Fournier | 2006-11-20 01:56:58 | Re: [CORE] SPF Record ... |