[Asrg] SPF and other bad ideas

[Dotzero]

On Tue, Jan 20, 2009 at 7:00 AM, Ian Eiloart <iane at sussex.ac.uk> wrote:
>
>
> --On 19 January 2009 15:48:20 -0500 Dotzero <dotzero at gmail.com> wrote:
>
>>
>> If an enduser wants the flexibility to send from Kiosks or through
>> other MTAs and their company or mail provider allows this by policy
>> then the use of strong SPF assertions is likely inappropriate. My
>> response to you is the old saw about the person who goes tot he doctor
>> about a pain.... "Doctor, it hurts when I do that" ...... and the
>> Doctor says..... "Don't do that".
>
> In any case, you can use ~all. All I want to do is be able to whitelist
> email that's being sent by the usual methods from trusted sources. There's
> no reason that a Kiosk shouldn't be set up to use a webmail client.
>

Of course there are reasons Ian. Read what I wrote. If your
organizations policy prohibits the use of kiosks in conjunction with
the account they provide you with, that would seem to be a pretty good
reason to me. Another good reason might be that shared computers
(including kiosks) have quite the track record of being compromised by
folks with ill intent.

The fact that you can find some cases where some people choose to use
a kiosk does not change the fact that a persons use of an email
account is subject to the terms and conditions of use set by the owner
of the domain providing the account. If it's your domain or the
provider of your account says you cand o whatever youw ant then knock
your socks off.