Re: (DEPLOY) In Support of Sender ID

[George Schlossnagle <george@xxxxxxxxxx>]

On Sep 3, 2004, at 11:02 AM, Daniel Senie wrote:

> At 02:42 AM 9/3/2004, Meng Weng Wong wrote:
>
> > On Fri, Sep 03, 2004 at 06:25:21AM +0100, Graham Murray wrote:
> >
> > My read of most ISPs is that they are willing to move in
> > this direction if it proves necessary.  Many ISPs are
> > beginning to roll out (mandatory) SMTP AUTH.  With that in
> > place, halting cross-customer forgery becomes a much more
> > likely proposition.
>
> To be a little more accurate, SMTP AUTH does not prevent customers of 
> an ISP or hosting company spoofing one another, but it does provide an 
> audit trail, so the person doing the spoofing can easily be identified 
> from log entries.

It can.  There are MTAs which support only using a set envelope sender 
after SMTP AUTH.

George