Re: spoofing email addresses

2004-05-27 Thread Iljitsch van Beijnum
On 27-mei-04, at 20:51, Vernon Schryver wrote: The vast majority of the spam that sender validating systems might block after they have been installed in most SMTP clients 5 or 10 years from now is rejected today at any organization that really cares about spam using any of various tactics includin

Re: spoofing email addresses

2004-05-27 Thread Vernon Schryver
> From: [EMAIL PROTECTED] > > "The people who claim that something can't be done shouldn't get in the > > way of the people doing it." > > I didn't say it *cant* be done. I said there were known problems that any > successful solution would have to address. Another response is to point out that

Re: spoofing email addresses

2004-05-27 Thread Valdis . Kletnieks
On Thu, 27 May 2004 18:23:17 +0200, Iljitsch van Beijnum said: > There is also the possibility of blacklisting known bad credentials. Anybody who's had to get themselves out of 3,000 private blacklists, and anybody who's had to fight with places that were blackholing the 69/8 address space, knows

Re: spoofing email addresses

2004-05-27 Thread Mr. James W. Laferriere
Hello Paul , On Wed, 26 May 2004, Paul Vixie wrote: > > > In fact, there isn't any sane way to detect "inconsistent" header > > > information without external hints - this is the reason why there's the > > > SPF proposal, the Yahoo domain-keys proposal, and Microsoft's proposal. > > And MA

Re: spoofing email addresses

2004-05-27 Thread Iljitsch van Beijnum
On 27-mei-04, at 16:56, [EMAIL PROTECTED] wrote: the proposals aren't even a workable solution to the real problem (I've yet to see a proposal that works if the spammers start utilizing zombie machines that snarf the already-stored credentials of the user to send mail) It amazes me how many p

Re: spoofing email addresses

2004-05-27 Thread Valdis . Kletnieks
On Wed, 26 May 2004 15:00:00 MDT, Vernon Schryver <[EMAIL PROTECTED]> said: > I don't see any of those proposals and their competitors as sane. Oh, I wasn't addressing whether the proposals were workable, merely listing proposals motivated by the fact that verifying the legitimacy of a sending ma

Re: spoofing email addresses

2004-05-27 Thread Paul Vixie
> > In fact, there isn't any sane way to detect "inconsistent" header > > information without external hints - this is the reason why there's the > > SPF proposal, the Yahoo domain-keys proposal, and Microsoft's proposal. > > And MARID. and don't forget http://sa.vix.com/~vixie/mailfrom.txt";>MAI