Re: More about the SPF RRTYPE

Frank Ellermann <[email protected]>
Newsgroups gmane.mail.spam.spf.discuss
Message-ID <CAHhFybpukaY3cRSoWD+OFTPiG94tXwcHX0XjfxGj7crwh2jX=A@mail.gmail.com>
On 15 August 2011 21:06, Murray S. Kucherawy wrote:

> Over on the exim-users mailing list, someone just complained that
> libspf2 tries for RRTYPE 99 (SPF) before 16 (TXT).  That’s what the
> standard says to do, but it also means some sites that firewall out
> unknown RRTYPEs cause clients to time out on the 99 before they try
> 16.  During that time, some SMTP clients time out altogether and
> try again later, and the mail ultimately never gets through.

> Maybe this isn’t news to anyone

Yes, but it is clearly something that should be addressed in 4408bis:

Apparently nobody intends to eliminate the ugly TXT abuse in v=spf1,
because it's years too late to try it, or IOW, the wannabe-experiment
failed to fix this.

Possible ways to improve that situation in 4408bis:

1 - try the SHOULD type 99 approach again, a PS could succeed where
    an "experiment" failed.
2 - give up, note that TXT is ugly but can't be changed, and that
    now is the time to drop SPF type 99 for the purposes of v=spf1.
3 - explain that practical EDNS0 limits could affect TXT where type
    99 still works, but that trying both queries simultaneously and
    pick the first answer is perfectly okay.

I didn't look into RFC 4408 for some years, but IIRC (3) is allowed,
or isn't it?

-Frank
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.