Linus Upson wrote:
Qurb will never throw mail away because of a FAIL
Please try hard to make sure your users understand that SPF is
not really designed for this usage. For the one false positive
out of 10,000 FAILs rejected at the MX the sender would get a
good bounce and can try to resend his mail on another route.
If an end user was "trained" to delete 9,999 out of 10,000 spam
mails identified by a FAIl (your "not verified"), then he might
also delete the one false positive.
There's also a possible race condition if you check SPF behind
the point where it should be checked, but as you said that
could be considered as "poorly configured SPF record". If you
explain this in a way that all your users reading manuals can
understand, that would be great.
Bye, Frank