On Wed, 15 Dec 2004, David Woodhouse wrote:
On Wed, 2004-12-15 at 07:20 -0500, Hector Santos wrote:
Obvious SPF was in use. There were plenty of people providing SPF
stats, Wayne including myself talked about SPF stats quite often.
I've seen stats on SPF _publication_ which currently set the number of
domains publishing SPF at just over two hundred thousand¹ out of a total
of 65 million² domains -- about 0.3%.
Wayne promised to publish new stats with 1 million domains...
In general to put this issue to rest, I think it would probably be good
if Wayne or somebody else begins to collect list of domains that published
spf on monthly or basis (or once/3-month) and publish such data on website
with clear links to summary for each month with list of domains that the
data is based on also available for download to registered users (not that
bad people don't registere to get the list, but it maybe enough to stop
majority of such of such abuse).
That's not even the most interesting statistic though -- I'd be more
interested in a figure on the number of people who are actually
_rejecting_ mail due to SPF failures. Does anyone have statistics on
that?
Godaddy is by far the largest company I know that is rejecting based on spf.
However there are quite a number of companies that are implementing spf as
part of the more large-scale ranking filter (i.e. like SpamAssassin) and
its difficult to say about those implementations if they can be said to
be rejecting based on SPF or not if they put -all as meaning that its
75% of the way there to the spamfolder (or just directly goes to
spamfolder but does not get rejected at SMTP level).
--
William Leibzon
Elan Networks
william(_at_)elan(_dot_)net