Greg Hewgill wrote:
I gathered some sources of domain names, and set up a web site to track
it all: http://spf-all.com
Your page says "is a forgery" for "-all", that's an over-simplification.
Actually it means "match anything else with result FAIL in this test".
It could be a forgery. It could be legit, and the receiver checked
at the wrong place against a FAILing IP.
A "+all" could be a part of a non-trivial include:not-me-scheme, where it
later turns out to be bad. A "+all" in the sense of "all IPs worldwide
are permitted to send mail from me" is "odd", but still a valid statement.
Your test will "miss" gmx.at and gmx.ch, they redirect to gmx.net (you
have gmx.net already, I submitted gmx.de). I hope you don't count any
wildcards, that could spoil your statistics. I've added a link to your
site from <http://www.openspf.org/Statistics> - about 1 of 400 domains
isn't much, but of course "number of domains" and "number of mails" are
anyway different.
Frank
-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Archives: http://v2.listbox.com/member/archive/735/=now
RSS Feed: http://v2.listbox.com/member/archive/rss/735/
Modify Your Subscription:
http://v2.listbox.com/member/?member_id=2183229&id_secret=74157163-58eefd
Powered by Listbox: http://www.listbox.com