OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Trust (was: SPF is fundamentally broken)

From: Alex van den Bogaerdt (alexergens.op.het.net)
Date: Thu Jan 15 2004 - 07:39:11 CST

On Thu, Jan 15, 2004 at 02:16:09PM +0100, Erwan David wrote:

> > > at wrok I'm on domain B
> > >
> > > During my holydays I use a .forward to a mailbox in C
> >
> > So, mail is delivered to you, and you decide to resend it.
> >
> > > Someone in A writes to me at B, what should happen ?
> > >
> > > With your scheme, maiol is lost because C refuses it.
> >
> > No, C refuses mail because A does not allow B to impersonate A
> > and because C is setup to refuse, not tag.
>
> Yes, and mail is lost.

That depends on what B does with it. B took responsability for
the message. B cannot transfer this responsability to system C.
B gets to keep the responsability. If the message is lost, B is
not doing a good job.

> > You have a problem with A and with C, not with SPF.
> >
> > Why should "Someone in A" suffer from mistakes made by you,
> > the end user, or by domain "C", where the message was not sent?
>
> It is no mistake. I redirect my mail voluntarily.

_If_ you make a mistake, such as writing wrok where you mean work,
why should "A" get the bounce?

You, B, are doing something the sender, A, has no control over.
You, B, may or may not be introducing a problem.
You, B, did in fact receive the message. It is under your control
now. You, or your system, should deal with any problems.

> > Suppose A has a good reason not to exchange mail with C,
> > why should _you_ instruct C to send bounces to A?
>
> Which bounce ? Mail was meant to go to *me*. I happen to be at
> C. Mail did not go to me. Here is the problem.

Which bounce? Can you guaranty that you do not, ever, have a problem
with system C, with your mailbox on system C, with the connection
to system C or whatever else that can go wrong?

Again, A may have good reasons not to send mail to C. Who are you
to dictate that A should receive bounces caused by problems in C?

> And if A is ,not notified that mail did not treach me, then situation
> is worse.

If A is not notified, this is because B is not doing a proper job.

Alex
--
begin sig
http://www.googlism.com/index.htm?ism=alex+van+den+bogaerdt&type=1
This message was produced without any <iframe tags