Re: misconception in SPF
Chris Lewis <[email protected]>
| Newsgroups | gmane.ietf.asrg |
|---|---|
| Message-ID | <[email protected]> |
On 12-12-10 10:59 AM, Christian Grunfeld, [email protected] wrote: > I'm really surprised to see how discussions diverges on this list ! > > The problem statement is very simple: > > 1) How many people on this list saying that SPF is bad have TXT > records published on their domains ? Why do you use it in real life > and deplore it here ? Maybe they're experimenting with DMARC. Maybe they're listening to PHBs who insist on it. Maybe they wanted to get email into hotmail. Or simply that that it's useless, and it don't matter whether they have one or not. > 2) How many people on this list that use SPF have only one TXT record > at the top domain and remain relaxed having [?~-]all, ignoring this > thread ? See below > I accept that some of you don't mind that a third party can use your > subdomains to send forged emails claiming that are from you. I > personally don't like that and applied the fix ! You mean like this? _spf.google.com. 300 IN TXT "v=spf1 include:_netblocks.google.com ?all"