On Mon, Oct 11, 2004 at 03:24:50PM -0400, guy wrote:
| It is not just you. The spf docs, faqs and such are not clear on this. And
| this seems like a very important issue, since sub-domains and hosts can be
| used to forge emails.
|
| Try it:
| dig +short txt ebay.com.
| dig +short txt www.ebay.com.
| dig +short txt aol.com.
| dig +short txt www.aol.com.
For the record, the docs are unclear about this because
there has been no consensus about which future we want to
live in.
We don't want the world to have to put an SPF record on
every single www.domain.com out there, but we don't seem to
want to embrace any of the technological alternatives
either.
We have had threads about the endgame scenario before.
See
http://archives.listbox.com/spf-discuss(_at_)v2(_dot_)listbox(_dot_)com/200409/0258.html
http://archives.listbox.com/spf-discuss(_at_)v2(_dot_)listbox(_dot_)com/200409/0451.html