Meng Weng Wong [mengwong(_at_)dumbo(_dot_)pobox(_dot_)com] wrote:
I negotiated with MS on this issue and the answer is "if
you're not comfortable with SPF1 records being used in PRA context, you
can just publish
domain.com TXT "spf2.0/pra"
That record means the spf1 record won't be used for PRA.
The way I see it, the onus is on MS and anyone else
implementing PRA to specialcase around failures of the PRA
to DTRT. (eg EzMLM, Yahoo!Groups).
Embrace and extend par excellence. And I doubt the rest of the world will
care who's responsible for that mess.
Let's pray we have the necessary will and brawn to defend the original
interpretation of those spf1 records. (Personally, I certainly won't
publish spf2.0/pra records in order to protect my spf1 records. But who
cares about me?)