[RFCI-Discuss] Yahoo break RFC

[Derek J. Balling]

Speaking strictly to RFCs, not to "policies", "sanity" or "right- 
ness"....

> Ok I sent this message with Arcor email, but this was not the real  
> Arcor, it's from Yahoo's mail server.
>
> The thing let me upset is, Yahoo fake the envelope address.

They have not "faked it", they have set it to what the sender (you)  
have said it should be.

> You can see,Yahoo doesn't have the privileges to declare it's  
> gmail,but it did.

The SMTP RFCs say nothing about "what servers have privileges to use  
what domain-parts in the envelope".

> Another problem,with faking envelope address, Yahoo has broken the  
> SPF rules.

And a site using SPF will reject that e-mail.

> When a server get a message from abc at arcor.de which was faked by  
> Yahoo, the sending IP doesn't belong to
> Arcor, how would the recipient server think about? It reject this  
> message or not?

If the site uses SPF, yes, they would/should reject it, assuming  
that's the SPF policy you publish.

> How about your thought on it? Is this a RFC break? Thanks!

I don't see any "breaking of RFC" here. It may not be how I would have  
done it, but I can understand the logic behind the decision.

Cheers,
D

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2419 bytes
Desc: not available
Url : http://lists.megacity.org/pipermail/rfci-discuss/attachments/20071029/31f54c4e/attachment.bin