Anthony Ercolano <[EMAIL PROTECTED]> writes:

> I suppose that I could go through the various senders of email that
> I receive and change them to tagged addresses, but it seems a hassle
> for me and others who I am managing.

I agree.

> What is really key do me here is that some application along the chain 
> of email processing has verified that I received an email with a valid 
> domain key signature.  I really want to believe that I haven't been 
> spoofed if the email message has the valid signature.
>
> *IF* I could get spamassisn to change from the prefered (default) 
> behavior and munge the email by adding an extra header then I could 
> simply do a header filter test on that.  This would be irrespective of 
> the domain that the email came from.

Right.  That sounds like a good approach.  In general, a good
conservative use of TMDA is to put it last or close to last in the
chain of processing, and avoid sending challenges as much as possible,
such as in the case of a message having a valid domain key signature.

_____________________________________________
tmda-users mailing list (tmda-users@tmda.net)
http://tmda.net/lists/listinfo/tmda-users

Reply via email to