All Archives / aussie-isp / 2006-04
<<< Date >>>
Permanent Link
Date: Wed, 19 Apr 2006 15:46:27 +1000
From: Michael Tibben
To: aussie-isp, aussie-isp
Message-Id: <4445CEB3.7070908@webdock.com.au>
In-Reply-To: <000301c66362$96bc5e70$2522630a@t22>
References: <000301c66362$96bc5e70$2522630a@t22>
Subject: Re: [Oz-ISP] SPF Records
Followups:

<20060419215531.GC1102@k7.mavetju>


Sean Winn wrote:
> The lack of value comes from the layer of trust being effectively
> worthless, both as it applies to spam (validating a domain doesn't buy
> you much until domains get some trust), and for forgery in general based
> on the current implementations (very few large sites publish restrictive
> SPF records.)
>
> The former won't change readily, the latter may. I'm not holding my
> breath for either. I'm as guilty as anyone else of using '?all' where I
> can't be sure everyone's sending through my server.
>  
This is true.... and I can't believe that those who need this technology
more than anyone... ie banks.... are STILL not publishing SPF records

national.com.au -  no SPF
commbank.com.au  - no SPF
anz.com.au  - no SPF

If ISPs are making the effort to implement SPF for incoming email, large
companies and especially banks should be making a decent effort as
well.... implementing SPF is one of the first things they should be
doing to stop email phishing

Michael

----
email "unsubscribe aussie-isp" to m a j o r d o m o @ a u s s i e . n e t to be removed.

<<< Date >>>
This page was automatically generated, based on a complete record of postings made to the nominated list. Copyright issues, blame or gratitude belongs to the entity that wrote the content.