Re: @debian.org email forwarding and SPF

[Isaac To <kkto@csis.hku.hk>]

>>>>> "Matt" == Matt Zimmerman <mdz@debian.org> writes:

    Matt> Such as, er, well, all of us sending mail with @debian.org
    Matt> addresses from our home ISPs?

That's my understanding.  If @debian.org publish its own SPF record, it
means to ask people not to accept mails using @debian.org as from address
unless it is coming from a certain group of computers.  After that, mails
from @debian.org will have to go through those computer, persumably with
some sort of authentication.

This is what to pay for if members of @debian.org thinks that it is not a
good idea to allow spammers to use @debian.org as their from address in
their RFC 821 header (i.e., the bounces of such spam goes to the accounts of
the @debian.org holders---Joe-jobbed).  I'm not sure whether a good number
of people using @debian.org think that this is good bargain, though.  I
think some degree of convenience is probably okay to give up, the question
is how much to give up.  And of course this directly relates to how
convenient are the tools available for sending mails using the authenticated
channel (especially when the mails has to sometimes carry a different from
address).

Regards,
Isaac.