SPF needs to make the case that SPF interpretation is *not* turing complete
Why? Who is DVP anyway? :-)
The DVP people are particulary concerned that macro expansion could cause
buffer overflows and lead to exploits
Personally, I also wonder what all this macro stuff is all about - I mean, to
me it seems like a violation of the KISS principle, but I think the internet
has far bigger problems with potential exploits than this one, and their TCP
server introduces a new server service that can also be attacked. It's like a
battle between children about whether pears or apples have the best taste.
DVP has no chance. Even if it would be built into major mailservices, all
domain owners would need to get a service hosted, which is far more
complicated, especially from a security point of view, than only changing your
DNS settings on existing DNS servers.
Lars.