In <200505141427(_dot_)j4EERRZ2063686(_at_)asarian-host(_dot_)net> Mark
<admin(_at_)asarian-host(_dot_)net> writes:
So, should the SPF spec state that using SPF checks
outside the SMTP dialogue is NOT RECOMMENDED? I think it should. Or, at
least, I think it should be clearly understood why it is not recommended.
Using the definition as defined in rfc2119, the terms of "RECOMMENDED"
and "SHOULD" mean *exactly* the same thing.
The current I-D says "Software SHOULD perform this authorization
check during the processing of the SMTP transaction that injects the
mail.", which is exactly the same as saying that doing SPF checks
outside the SMTP transaction is NOT RECOMMENDED.
-wayne