>> i see other types of backscatter that could be solved by using spf > > only if spammers check spf before forging addresses, which I doubt...
I can say that since I started publishing SPF records at $DAYJOB we've seen a gigantic reduction in backscatter. I think many spammers do try to avoid using forged addresses from domains that publish DKIM/SPF records; that's a simple check they can run to increase the chance of their spew hitting inboxes instead of /dev/null. -- Dave Pooser Cat-Herder-in-Chief,Pooserville.com "Jon, the CIA's credibility has never been lower. Crazy people no longer believe the CIA is implanting a chip in their heads to listen to their dreams. They just don't think they can pull it off. It's a sad day for America when even our paranoid schizophrenics realize they don't need to wear the aluminum foil hats anymore." -- Ed Helms, "The Daily Show"