[RFCI-Discuss] Yahoo break RFC

Frank Ellermann omniplex at freenet.de
Thu Nov 1 23:23:33 EDT 2007


Derek Balling wrote:

> Let Yahoo deal with that problem.   Yahoo doesn't care about SPF

ACK.  However Jeff talked about a mail claiming to be from gmail.com
forged by Yahoo.  AFAIK the gmail.com SPF policy is PASS or NEUTRAL,
therefore Yahoo's forgery only results in NEUTRAL, not in FAIL.  In
other words Gmail still permits to forge Gmail addresses.  It would
very stupid to reject all NEUTRAL mails.  

 Frank



More information about the RFCI-Discuss mailing list