Re: misconception in SPF
Alessandro Vesely <[email protected]>
| Newsgroups | gmane.ietf.asrg |
|---|---|
| Message-ID | <[email protected]> |
On Fri 07/Dec/2012 21:45:54 +0100 John Levine wrote: >>I think this makes sense, but I think it would make more sense if there was >>a way to just specify in the SPF record for, for example, twitter.com, that >>all legit senders for all subdomains are included in the highest level SPF >>record. > > This sort of thing has been proposed before. It turns out that > anything in the DNS that starts "all names below this node ..." is > astonishingly hard to implement. > > (Yes, I know about zone cuts.) It is easy to do the opposite, though. For example, having leila.iecc.com TXT "v=spf1 redirect=iecc.com" would enable receivers, at the cost of an extra lookup, to infer that iecc.com is in the same administrative domain of that mailer, for reputation or reporting purposes. Aren't there generic (i.e. non spf-specific) DNS conventions for publishing such relationships?