spf-discuss
[Top] [All Lists]

Re: [spf-discuss] Question about redirect syntax

2006-03-15 15:49:36
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Kurt Andersen wrote:
Agilent Technologies has a large number of domains (gTLDs and ccTLDs)
and subdomains which we have just published SPF records for. In doing
so, we utilized the "rooted" format:

agilent.com.   TXT   "v=spf1 redirect=%{d}.d.spf.agilent.com."

This is causing problems with Scott's validation tool, but not with
the tool on DNSStuff or with the Mail::SPF::Query package.

Scott wrote to me:
The way I read the ABNF in the spec:
http://new.openspf.org/blobs/draft-schlitt-spf-classic-02.html#anchor42

domain-end = ( "." toplabel ) / macro-expand
toplabel   = ALPHA / ALPHA *[ alphanum / "-" ] alphanum ; LDH rule (See
[RFC3696])

the spec doesn't allow for the dot on the end.

Is this an intended departure from standard DNS syntax explained in
RFC 1034 section 3.1??

It sure is a departure from RFC 1034, and I'm pretty sure that _someone_ 
here intended it when the spec was written.  Personally, I don't see the 
point (no pun intended), just like I don't see the point in forbidding 
TLDs from beginning with digits just because there are currently no 
ICANN-registered TLDs beginning with digits.  But it's too late to change 
the spec now.

Stuart D. Gathman wrote:
Actually, the domain MUST be a FQDN ala SMTP.  In particular, relative
names are NOT allowed.

But "%{d}.d.spf.agilent.com." _is_ an FQDN, isn't it?

Scott Kitterman wrote:
Since my validation tool uses pySPF, as I see it, this is either a
M::S::Q bug or a pySPF bug.

I wouldn't hesitate for a second to put the blame for this inconsistency on 
M:S:Q.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)

iD8DBQFEGJmowL7PKlBZWjsRAhKpAKDEStCEDhcilJOZ6NDiGecgb+4YtgCcC+H8
CrTAAeLYrga4CL+ueGNU3is=
=8jM/
-----END PGP SIGNATURE-----

-------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com