[RFCI-Discuss] Yahoo break RFC
Frank Ellermann
omniplex at freenet.de
Thu Nov 1 23:23:33 EDT 2007
Derek Balling wrote:
> Let Yahoo deal with that problem. Yahoo doesn't care about SPF
ACK. However Jeff talked about a mail claiming to be from gmail.com
forged by Yahoo. AFAIK the gmail.com SPF policy is PASS or NEUTRAL,
therefore Yahoo's forgery only results in NEUTRAL, not in FAIL. In
other words Gmail still permits to forge Gmail addresses. It would
very stupid to reject all NEUTRAL mails.
Frank
More information about the RFCI-Discuss
mailing list