[Mimedefang] Deadline for SPF records

[Steffen Kaiser]

On Thu, 5 Aug 2004, Joseph Brennan wrote:

>> What is recommended for things like "send this page to a friend", where
>> the initiator wants to be able to have a remote machine send on his
>> behalf despite an SPF to the contrary?  MAIL FROM: <> From:?  From: <>
>> Sender:?  From: <> Reply-To:?
>
> The SPF advocates say all such systems must use an envelope sender
> with their own domain in it.  The header From: can still show
> what human sent it.  While this sounds like the right thing to do,
> I wonder how fast it can really be implemented and what pain will
> be caused in the meantime.

I wonder what the impact of SPF really is, because:

On Thu, 5 Aug 2004, Damrose, Mark wrote:

>> From http://spf.pobox.com/faq.html#allsmtp

Reading this doc, I'm starting to wonder:

1) it breaks mail forwarding.
http://spf.pobox.com/faq.html#forwarding

All forwarding/aliasing becomes resending?!

We have plenty of "forward-only" accounts, that do not have no local 
account. Who is the sender of such virtual account -> I will recieve all 
the DSNs then?!! Arrgh.

2) it does not protect the From:
http://spf.pobox.com/faq.html#whichfield
Actually for many concerns of mine this is exactly what I want (that the
From: header is set by the user as s/he wishes).

But I cannot see how I setup a MUA to use this From: header and that
envelope sender. Does somebody has some pointer to information about this
topic?

Consider the following scenario:
You know the large Call Centers around that get phoned for support by
customers often of many different companies.
Move that over to email support.
Consider an email support center named "support.com" for companies
"comanyA.com", "companyB.com" a.s.o.
When I consider SPF right, the mails send by the support center must use
the envelope address "XYZ at support.com", but the recipients must see
"XYZ at companyA.com", when doing bussiness for company A respectively.

How do I configure sendmail and the MUAs to support this? Will this 
effectly be happen (without being able to bypass by MUAs) using the MSA?

Bye,

--
Steffen Kaiser