At 03:51 PM 8/25/2004 -0700, you wrote:
David Brodbeck wrote:
Matthew(_dot_)van(_dot_)Eerde(_at_)hbinc(_dot_)com wrote:
Everyone will make their own choices, and we no
longer really have a standardized, predictable response. The whole
thing becomes much more non-deterministic. Different sites will be
treating the same SPF record completely differently.
This is a good thing. Different people have differing levels of
paranoia.
I don't see it as a good thing. It would mean that when you published
an SPF record, you would have to guess at how people were going to
interpret it. It makes it a lot riskier.
How is it riskier?
I meant only if the probabilities were not used, i.e. "Everyone will make their
own choices" thought he meant "everyone" is "recipients".
If a domain owner is concerned as to how people will
interpret their SPF record, they will limit themselves to + and -. No ?, ~,
Yes. And if owner is not confident of - then they use + (or no SPF record)
which is almost same as no SPF record.
I think that is why I am advocating this could increase adoption. It gives
owner a way to define more precisely their risk tolerance given their knowledge
of their use.