[Last-Call] Re: [dmarc-ietf] Re: Secdir last call review of draft-ietf-dmarc-dmarcbis-36

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

In message <10f5d0b0-f1f1-49e7-a0c9-db745618f859@xxxxxxxxx>, Stephen
Farrell <stephen.farrell@xxxxxxxxx> writes

>I'm not asking that SPF be banished, (none of us are good at going
>back and deleting RRs we wish we'd forgotten:-), but more that some
>domain owner/sender could indicate via DMARC to receivers that they
>think SPF is no longer good enough by itself, in their opinion, for
>email claiming to be from them (the sender).

If you use "?" as a modifier to ranges within your SPF record then it
will match (and prevent further processing) but it will not count as a
pass towards DMARC.

Some people see this as being preferable to eschewing having any SPF
record at all because (a) Google (unwisely in my view) say you should
have one if you want to deliver to them and (b) some small mailbox
providers believe in the value of SPF to do early stage filtering of
mailflows and may penalise your domain for not having any SPF at all.

((I roughly summarise what was discussed in the WG))

- -- 
richard                                                   Richard Clayton

Those who would give up essential Liberty, to purchase a little temporary 
Safety, deserve neither Liberty nor Safety. Benjamin Franklin 11 Nov 1755

-----BEGIN PGP SIGNATURE-----
Version: PGPsdk version 1.7.1

iQA/AwUBZ0hFRt2nQQHFxEViEQJ03ACg9RJJIHqlav/JcK9JBItjPTRhuzEAoMSd
kTjXLu8C8XnmpItO148lFWx+
=Beqy
-----END PGP SIGNATURE-----

-- 
last-call mailing list -- last-call@xxxxxxxx
To unsubscribe send an email to last-call-leave@xxxxxxxx




[Index of Archives]     [IETF Annoucements]     [IETF]     [IP Storage]     [Yosemite News]     [Linux SCTP]     [Linux Newbies]     [Mhonarc]     [Fedora Users]

  Powered by Linux