Upcoming debian.org e-mail change (SPF)

--=-bV7q6g5Q3FryQHitO1n3
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi,

In order to assist with delivery of e-mail from @debian.org addresses,
we will be introducing SPF records for debian.org in the near future,
along with records for $HOST.debian.org and $SERVICE.debian.org where
those are not already present.

You do not need to change anything if you are already using our mail
submission service [SUBMIT].

One of the key issues faced by both e-mail senders and recipients today
is authentication - i.e. to allow the recipient to be confident that an
e-mail was in fact sent by the alleged sender.

Debian Developers are currently able to use per-user DKIM keys to sign
e-mail from their @debian.org addresses [DKIM], in order to provide
some authentication, as well as a submission service [SUBMIT] which
will cause the e-mail to be sent from a debian.org host.

Unfortunately these measures are increasingly proving insufficient for
reliable delivery of e-mail, with an important missing piece being an
SPF record for debian.org and other domains used when sending mail from
our systems.

We will send a notification to the debian-infrastructure-announce list
when the debian.org record is added, and for any future significant
changes.

If you send e-mail using a debian.org e-mail address from any non-
debian.org hosts, then we strongly suggest that you use the mail
submission service. [SUBMIT]

Please contact DSA with any concerns or queries as soon as possible.

Regards,

Adam
for DSA

[DKIM] https://lists.debian.org/debian-devel-announce/2020/04/msg00004.html
[SUBMIT] https://lists.debian.org/debian-devel-announce/2022/07/msg00003.ht=
ml


--=-bV7q6g5Q3FryQHitO1n3
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----

iQJNBAABCgA3FiEEcgNjDiyOcnJRaE/rxc5dwsVCzVkFAmno+/AZHGFkYW1AYWRh
bS1iYXJyYXR0Lm9yZy51awAKCRDFzl3CxULNWdmQD/93p1YNb3k4nh80asgJWuFv
HdYv9mnQoJgUlPD6G73DaVEZ9CUD+zjk/JxfnG/r6+D3FbJjV8X6/tpJY8DWuUKv
d6XPWuqTmk1Kr0gJYBe6tpeIXL19CuDPK8oQfwdmlqdvageRtiKtQZQjQORipw7R
5q6ZFoPfe7OGzf73pS9lFQHJlCyc7ttrOCf6UOzyk2YEy9yyVgrUoSNeGorm8iM0
lepfZDQcsijFl6YPqY5Y33Is8tvi/ee3kZRSriQ9e9pyaGFXf7tKuiFG85ociWx7
MnURTqWWiuAG9PYA9vVKwtGR3pMeQXgqLfzYOSf3DVONvNENYdVsyypS+f5y8roK
AIXnKFwwR3ZUocfUG3S/al199OcFLuSJBfo9Xos55rLri1RfvNtW3CIOYCCi1QnX
uOw4UUPVjbvGJZaeB3rPDQgYmV4p6s1NK2h1ewGHpvFG2cF0vlHdLS56YpjGIwya
zZj1ErYrg0TKky21v8ce0YR8f4kRhGQqnNZ+/peOC41h5k3ig7vLrDMo8HRfezuX
n/86x20FcLoIzeUAF375COAlD/z7Y+HWB7KqcGoA/lTT5nDRcq+VF+IcRzxUoDU0
u5p5JmZBH0UQHXFA4mORVgMEVDz8GsMzfQsjPd4YguWIkHiS4kx2fHTMiZ399/MK
+GndgLU9V1u1aDJyb/k93w==
=mC35
-----END PGP SIGNATURE-----

--=-bV7q6g5Q3FryQHitO1n3--