Re: [Asrg] SPF, was where the message

["John Glube" <john.glube at trusted-email-sender.com>]

Up until the Spring of 2008, AOL was using SPF to
check what AOL called the "SPF_helo" and the
"SPF_822_from." 

We know this because the following headers were
observed in FBL data:

X-AOL-SCOLL-AUTHENTICATION: listenair ; SPF_helo: n

X-AOL-SCOLL-AUTHENTICATION: listenair ; SPF_822_from : n

("n" indicated the test failed. "y" indicated the
test passed.)

My understanding is that the "SPF_helo" check was
based on the perceived value of CSV and that the
"SPF_822 from" was part of the overall effort in
deciding whether to incorporate SID checks. It
was presumed that the data was also used as part
of the reputation analysis that AOL was running
on incoming mail.

I do not know whether AOL is still running these
checks. Investigation shows that AOL dropped the
X-AOL-Scoll-Authentication header sometime in the
summer of 2008.

My recollection from discussions with a former
AOL postmaster shortly after the collapse of
MARID is that AOL felt running an SPF_helo and
SPF_822_from check would be useful information as
part of the overall process of detecting and
blocking the "low hanging" spam.

John Glube


_______________________________________________
Asrg mailing list
Asrg at irtf.org
http://www.irtf.org/mailman/listinfo/asrg