fixing insecure email infrastructure (was: Re: [eweek article] Window of "anonymity" when domain exists, whois not updated yet)

Thu Jan 13 04:19:47 UTC 2005

On Wed, 12 Jan 2005 19:19:24 PST, Dave Crocker said:
> On Wed, 12 Jan 2005 17:40:10 -0500, Valdis.Kletnieks at vt.edu wrote:
> >  > 1) any legitimate mail source MUST have valid, functioning, non-generic
> >  >    rDNS indicating that it is a mail server or source.
> >
> >  And how, exactly, does it indicate it's a mail server or source?
> 
> In general, that's what dkeys/iim and csv (and maybe spf) are attempting to provide.

Yes, but he asked for a rDNS solution specifically...
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20050112/e4cf558f/attachment.sig>