Richard Clayton wrote in
 <gjar0nh2lomnf...@highwayman.com>:
 ...
 |... you might also note that the X people are probably not going to
 |spend many cycles to develop and test a DKIMbis since they have already
 |concluded it's not going to be capable of solving the problems they
 |consider to be important to them -- and those problems include code
 |complexity, latency and energy budgets.

Fun.  It is you who insists on adding that backscatter thing to
DKIM, even though it is *completely unrelated* to that technique!
It solely belongs into SMTP.
That way of yours is about creating a firewall against improving
a techique that is currently useless and thrown down the trashbin
in spam checkers etc: no more, no less!
A firewall, that is what it is.  Malicious!

I want to remark that postfix for example has implemented
a solution, the solution as such has a wikipedia page btw:

  WARNING

  Recipient address verification may cause an increased load on down-stream
  servers in the case of a dictionary attack or a flood of backscatter bounces.
  Sender address verification may cause your site to be denylisted by some
  providers. See also the "Limitations" section below for more.

  What Postfix address verification can do for you

  Address verification is a feature that allows the Postfix SMTP server to block
  a sender (MAIL FROM) or recipient (RCPT TO) address until the address has been
  verified to be deliverable.

  The technique has obvious uses to reject junk mail with an unreplyable sender
  address.

  The technique is also useful to block mail for undeliverable
  recipients[.]

I use this in practice on my postfix server, and it must be said
that certain commercial services play very bad with it: i need to
manually whitelist them in order to get their email delivered.
Why not say names, just two weeks ago i think topicbox.com /
messagingengine.com, they do not use VERP, which is just another
failure of the IETF, as it has never standardized this absolutely
necessary approach (even for graylisting which *is* standardized).
The IETF uses it itself through the (badly configured) software it
uses: *that* is the only truth around here.

Have a nice evening,

--steffen
|
|Der Kragenbaer,                The moon bear,
|der holt sich munter           he cheerfully and one by one
|einen nach dem anderen runter  wa.ks himself off
|(By Robert Gernhardt)
|
|In Fall and Winter, feel "The Dropbear Bard"s pint(er).
|
|The banded bear
|without a care,
|Banged on himself for e'er and e'er
|
|Farewell, dear collar bear

_______________________________________________
Ietf-dkim mailing list -- ietf-dkim@ietf.org
To unsubscribe send an email to ietf-dkim-le...@ietf.org

Reply via email to