David Woodhouse wrote:
On Wed, 2004-09-15 at 09:52 -0400, Kevin Peuhkurinen wrote:
Add my name to those that disagree with you. I have "-all" in my SPF
records because I am confident that all legitmate business related
emails from my company will be sent from the servers specified in my SPF
records and none others.
Your confidence is misplaced. As an example -- if you ever send a mail
to the address 'dwmw2(_at_)infradead(_dot_)org', it's likely to get forwarded to
wherever I happen to be reading my mail at the time, such as an email
address at my current place of employment. Neither you nor the sysadmin
at the final destination may have any idea about the arrangement, which
is an established practice and which has worked for decades.
Breaking this so abruptly would constitute a flag day. Your naïveté
is a prime example of why such records should temporarily be prohibited,
until such time as the rest of the world has adjusted.
By immediately allowing the use of '-all' on domains which actually send
mail, we would promote discord and harm interoperability.
Uhm... I object to the implication that -all should, or should not, be
allowed. It is situationally dependent and the spec
should bow to that possibility.
Ex: moongroup.com uses -all right now and has for some time without any
difficulties.
I also recognize that other domains have different situations and for
them -all would not be an efficacious choice.
I think we should "allow" the use of -all or ~all as the domain
administrators prefer based upon their
own particular situation.
--
Chuck Mead <csm(_at_)redhat(_dot_)com>
Instructor II (and resident Postfix bigot), GLS
Disclaimer: "It's Thursday and my name is Locutus of B0rk!"
Addendum: "Bwahahaha! Fire up the orbital mind-control lasers!"