ietf-asrg
[Top] [All Lists]

Re: [Asrg] misconception in SPF

2012-12-10 10:36:52
On 12-12-10 10:59 AM, Christian Grunfeld, 
christian(_dot_)grunfeld(_at_)gmail(_dot_)com
wrote:

I'm really surprised to see how discussions diverges on this list !

The problem statement is very simple:

1) How many people on this list saying that SPF is bad have TXT
records published on their domains ? Why do you use it in real life
and deplore it here ?

Maybe they're experimenting with DMARC.  Maybe they're listening to PHBs
who insist on it.  Maybe they wanted to get email into hotmail.

Or simply that that it's useless, and it don't matter whether they have
one or not.

2) How many people on this list that use SPF have only one TXT record
at the top domain and remain relaxed having [?~-]all, ignoring this
thread ?

See below

I accept that some of you don't mind that a third party can use your
subdomains to send forged emails claiming that are from you. I
personally don't like that and applied the fix !

You mean like this?

_spf.google.com.        300     IN      TXT     "v=spf1 
include:_netblocks.google.com ?all"

_______________________________________________
Asrg mailing list
Asrg(_at_)irtf(_dot_)org
http://www.irtf.org/mailman/listinfo/asrg