Deprecation of the MAIL-FROM auth scheme

Dear Colleagues,

Another issues that was discussed at the RIPE-41 meeting is deprecation 
of a MAIL-FROM authentication scheme. It was agreed that the weakness of 
this auth form does not allow to provide real protection to the database 
objects and it should be deprecated.

As a matter of fact recently we had to deal with several incidents when 
objects were hijacked using the flaw of the MAIL-FROM. It took time and 
resources from the ripe-dbm to investigate the matter and restore the 
objects, to say nothing about possible damage to the owners of such 
objects should the incident has gone unnoticed.

Please find enclosed the migration plan to a more secure database.

Your comments are welcome.

Regards,

Andrei Robachevsky
DB Group Manager
RIPE NCC
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: mail-from.txt
URL: <https://lists.ripe.net/ripe/mail/archives/db-wg/attachments/20020325/e48ad71d/attachment.txt>