The demon problem, ancestor matching, and match_subdomains=yes

On Fri, Mar 19, 2004 at 05:24:25PM -0500, Stuart D. Gathman wrote:
| Also, when SPF returns 'none', should I
| check smaller right hand sides?  E.g. check mx.aol.com, then aol.com 
| (which would pass).
| 

We've been thinking about this.  Some thinking is at:
http://spf.pobox.com/faq.html#demon

But maybe we want to allow ancestor search for a record with a
match_subdomains=yes modifier.