spf-discuss
[Top] [All Lists]

Re: Greeting Card sites catching on

2004-07-11 07:54:16
On Mon, Jul 12, 2004 at 12:30:18AM +1000, Chris Drake wrote:

Why is this lame?  You only really need SPF on your MTA's domain(s)

Not entirely true, you need to set SPF records on _all_ your domains and
subdomains. What if you didn't set SPF records for www.something.com
(supposing www.something.com has an IN A different from the wildcard)??
Then spammers can send MAIL FROM: me(_at_)www(_dot_)something(_dot_)com, which 
is
something you'd probably want to avoid.

Koen

-- 
K.F.J. Martens, Sonologic, http://www.sonologic.nl/
Networking, embedded systems, unix expertise, artificial intelligence.
Public PGP key: http://www.metro.cx/pubkey-gmc.asc
Wondering about the funny attachment your mail program
can't read? Visit http://www.openpgp.org/

-------
Sender Policy Framework: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Send us money!  http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com

Attachment: pgpLillKW5RLc.pgp
Description: PGP signature