"Ryan Malayter" <rmalayter(_at_)bai(_dot_)org> wrote:
With XML as part of SPFv2, a developer implementing SPF for their MTA or
MUA (commercial or free) can simply use the XML parser their development
environment already has, and build only the rejection logic. These
widely-used XML libraries will be, for the most part, efficient and free
of stack-and-buffer overflows, something which cannot be said of a
re-implemented SPFv1.
Many people (including me) don't have an XML parser on their SMTP server.
For us, installing a XML parser just to add a feature is a pain. A
compromise would be to have a specialised SPF-XML parser that would be much
smaller and faster than a full featured XML parser.
XML is great for most of things, but I happen to think that DNS is one of
the few places where XML does not have its place.
BTW, I'd bet that they are still buffer overflows in many XML parsers.
Best,
GFK's
--
Guillaume Filion, ing. jr
Logidac Tech., Beaumont, Québec, Canada - http://logidac.com/
PGP Key and more: http://guillaume.filion.org/