On 01/14/2015 09:23 AM, [email protected] wrote: > That's a flaw in spf, dkim. They don't anticipate forwarding.
Actually, they do anticipate and work with forwarding - unfortunately they don't work with forwarding the way it was done in the 1980s and 90s. :) Sadly the notion that these practices should change after so many decades makes some people very upset, and very vocal. >From my perspective, the rise of wholesale fraud and system compromise via phishing over the past 20 years is a compelling reason to pursue email authentication - as one of a number of steps. There are things that I believe will never be amenable to similar technical measures, like the misleading contents of a message. However such challenges do not excuse doing nothing on points that can be constructively addressed. Just so this isn't brought up later as a sign I'm part of some shadowy cabal - I participated in the IETF working group that created DKIM, and I also participated in the creation of DMARC and am active in that IETF working group, as well as DMARC.org. --S. _______________________________________________ bblisa mailing list [email protected] http://www.bblisa.org/mailman/listinfo/bblisa
