--On Freitag, Mai 27, 2005 16:20:57 -0700 Dennis Willson
<taz(_at_)taz-mania(_dot_)com> wrote:
Yes I totally agree.... As far as I'm concerned if a domain has SPF
records defined then a mail server either has permission to send email
for that domain or it doesn't. So if the SPF records exist then there is
PASS and FAIL. I really don't get why someone would use "~all" or "?all".
Maybe because SPF allows you to distinguish between different localparts?
In most cases I can giv you a definite PASS or FAIL, but for some
localparts this is not possible, so I will return a indeterminate result.
If you're going to do that, just don't use SPF.
Another reason to just use "v=spf1" (which results in NEUTRAL): DNS
caching. A positive result (even just stating effectively "no SPF here") is
usually cached much longer than a negative result (I use 6h vs. 30 min).
Ralf Döblitz