Hi !!
>> It's even less effective than SPF; at least with SPF I can't
>>forge a domain that has an SPF record that excludes Comcast's servers.
>
> Wrong. You just use SRS to do it -- so instead of sending
> MAIL FROM:<victim@???> you'd send instead something like
> MAIL FROM:<SRS0+xx+yy+abused.net+victim@???>
well, now you are not forging abused.net, you are forging a comcast.net
address
--
Best regards ...
----------------------------------------------------------------
David Saez Padros http://www.ols.es
On-Line Services 2000 S.L. e-mail david@???
Pintor Vayreda 1 telf +34 902 50 29 75
08184 Palau-Solita i Plegamans movil +34 670 35 27 53
----------------------------------------------------------------
