Building on discussions in Dusseldorf (and fitting nicely into some
postings here),
MAAWG has published a white paper titled "
Important
Considerations for Implementers of SPF and/or SenderID." A few selected
quotes:
"...there are some important differences between the original SPF idea
and its derivatives, including Sender ID -- primarily in regards to
which part of the message should be verified and how to interpret the
intention of the domain owner.
. . .
It is important to note that while MAAWG continues to encourage and
facilitate the testing of multiple experimental sender authentication
methods, the Messaging Anti-Abuse Working Group currently neither endorses
nor discourages the use of SPF or Sender ID."
While MAAWG won't be officially announcing this paper until next week,
it's already linked from the front page of maawg.org.
