6 Feb 2009 19:02
FYI: Vouch by Reference, yet another use for SPF
Alessandro Vesely <vesely <at> tana.it>
2009-02-06 18:02:57 GMT
2009-02-06 18:02:57 GMT
Although its intended use is DKIM, VBR http://en.wikipedia.org/wiki/Vouch_by_Reference allows SPF as a means to identify that a mail message originates from a given domain. In the draft's words: When SPF is the validation mechanism, VBR's md= MUST be the same value as the domain name in the <reverse-path> address that is the first parameter to the SMTP MAIL command. A domain is valid for use with VBR only when the SPF process produces a "pass" result. Briefly, VBR provides for a list (mv=) of certifiers, i.e. third parties offering vouch-for services. If example.net is one such operator, a DNS record like example.com._vouch.example.net. IN TXT "all" would certify all mail from example.com. In that case headers like Return-Path: <someone <at> example.com> Received-SPF: pass SPF=MAILFROM; ... VBR-Info: md=example.com; mc=transaction; mv=example.net:another.example; will validate the message, if the recipient trusts example.net.
RSS Feed