spf-discuss
[Top] [All Lists]

[spf-discuss] Re: Polishing Mail::SPF::Query

2005-11-29 07:38:18
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Arjen de Korte wrote:
The CallerID feature in Mail::SPF::Query was implemented as a fallback
mechanism in case a domain had not published an SPF record.  This was
only done if the domain was either (*.)microsoft.com or (*.)hotmail.com.
Since both Microsoft and Hotmail publish an SPF record, the CallerID
records will no longer be used by Mail::SPF::Query. 

As a side note, Hotmail has effectively pulled its '_ep.hotmail.com'
record (it references non-existing records), so that leaves only the
Microsoft CallerID record to query (although I doubt it is still being
maintained now that they have officially moved to SenderID).

We (the SPF crowd) argue that SenderID is abusing SPF records. Yet at
our turn we also abuse CallerID records for SPF checks. And since there
no longer is anything to gain with supporting this ancient code, why not
remove it. CallerID (and SenderID) are not SPF and as such don't belong
in a reference implementation.

Note that Mail::SPF::Query hasn't just been playing the role as the 
reference implementation, historically it has also been the first SPF 
implementation overall and sort of a testbed for experimentation, as can 
be seen from M:S:Q's history (browse the Svn repository[1] if you're 
interested).  M:S:Q being in relatively wide deployment, we can't just 
start treating it as if it were nothing but a reference implementation, as 
much as we might wish to do so.

But of course all the other arguments of yours hit very good points, so I 
guess we can safely remove Caller-ID support.  (I was just being a bit 
wary, but that was probably too conservative.)

References:
 1. http://www.openspf.org/source/mail-spf-query-perl/trunk/Query.pm
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQFDjGeqwL7PKlBZWjsRAlwxAJ9F5OMFUR//5fWd6Yz1CG5iJM+rDQCgtOB3
iQYTcUUn1LxOb2wA3kLLeBw=
=uXnA
-----END PGP SIGNATURE-----

-------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com