Autor: David Woodhouse Data: A: David CC: exim-users, David Brodbeck Assumpte: Re: [exim] support for domainkeys
On Thu, 2004-09-23 at 19:04 +0200, David wrote: > Hi !!
>
> >> It's even less effective than SPF; at least with SPF I can't
> >>forge a domain that has an SPF record that excludes Comcast's servers.
> >
> > Wrong. You just use SRS to do it -- so instead of sending
> > MAIL FROM:<victim@???> you'd send instead something like
> > MAIL FROM:<SRS0+xx+yy+abused.net+victim@???>
>
> well, now you are not forging abused.net, you are forging a comcast.net
> address
That's a completely arbitrary technical distinction which has absolutely
no meaning in _practice_. You haven't noticed that my email isn't from
dwmw2@??? directly but is in fact from some SRS0+... address;
why do you claim it makes any difference in the case above?
