Re: Implementation certification procedure

"Stuart D. Gathman" <[email protected]> Tue, 19 Aug 2008 12:16:41 -0400 (EDT)
Newsgroups gmane.mail.spam.spf.devel
Message-ID <[email protected]>
On Tue, 19 Aug 2008, Stefano Bagnara wrote:

> My effort to make the tester "implementation agnostic" is really to gain some
> more trust from you when you see that my tester correctly check your
> implementations.

What about it guys?  I would "certainly" vote for jSPF as "certified", but what
about the next implementation that comes up?  What is the procedure?  Do 
we elect a review panel?  Bring back the council?  Have a general vote of
everyone on spf-devel?  Did we have a procedure written, but forgot about it?

> Using the "commandline interface" is the only way I found to test different
> implementations using a single tester.

The test suite is certainly a critical component, but how do we determine that
it is properly applied?  We don't have a volunteer to do the testing
independently.  Stefano's suggestion to offer a test via the spfquery 
interface and his live DNS framework is an excellent solution.  I can trivially
add a DNS port option to spfquery in pyspf.  That will help define the precise
spfquery requirements (which are something of a vague convention at this
point).

-- 
	      Stuart D. Gathman <[email protected]>
    Business Management Systems Inc.  Phone: 703 591-0911 Fax: 703 591-6154
"Confutatis maledictis, flammis acribus addictis" - background song for
a Microsoft sponsored "Where do you want to go from here?" commercial.