[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: DEPLOY: Sender-ID provides little or no defense against adaptive threats

On Sat, 4 Sep 2004 terry@xxxxxxxxxxxxxxxxxxxx wrote:

> 
> Not "accomplished nothing" but we would have accomplished the need for the next step:  SMTP AUTH
> that incorporates spoofing prevention.

Oh, SMTP AUTH needs to be changed now.  

And you still have SMTP AUTH passwords that can be stolen.

And you still have disposable accounts.

And you still have disposable domains.

Etc, etc, etc.

The user _still_ needs to do just what they did before.

At even greater expense, you have _still_ accomplished nothing.


		--Dean