Re: Problems with spf testsuite and dns specification

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Stefano Bagnara wrote:
> Can someone add this issue to the Errata page
> (http://www.openspf.org/RFC_4408/Errata) or change the testsuite to not
> check this?

In order for this to become an erratum to RFC 4408, it would have to be 
approved by the council.  I can table this for the next council meeting, 
even if -- as I said -- I don't think that would be the correct solution.

As far as the test suite is concerned, a change can eventually happen, but 
it won't be "fast".  Perhaps in a week or two.  But see below.

> I bet that most "compliant" SPF implementations currently use resolver
> libraries that compact the results

(For what it's worth, I somehow doubt that client-side unification of 
multiple identical RRs is widely implemented in DNS _resolvers_.)

> and in real use cases they probably fail to recognize identical duplicate
> records: are these implementations being tested against real dns servers
> or the resolution process is mocked?

I currently don't know of any RFC 4408 compliant implementation that tests 
against live DNS.  There may be some, but I don't know any.

> How can I help to have a fast solution for the test suite? I'd like to
> complete our jSPF library and make sure it is compliant and this issue
> is critical.

Until the issue is resolved officially, you can instruct your jSPF test 
suite driver to skip the problematic tests, explicitly declare in your 
documentation that you cannot comply with those tests, and explain why.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGc90YwL7PKlBZWjsRAqccAJ9vHOMRoprzxmwlMOkqhUjZsTmPhACcCMmr
HD3x5BxjsFRa3rNpyBTjwI4=
=luAj
-----END PGP SIGNATURE-----

-------------------------------------------
-----------------------------------------------------------------------
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to http://v2.listbox.com/member/?member_id=6959932&user_secret=62b4c45f
Powered by Listbox: http://www.listbox.com