On Wed, May 19, 2004 at 02:00:03AM -0700, Russ Allbery wrote: > There is one and only one case where you should ever add a useful SPF DNS > record (as opposed to one of the unuseful ones that make no actual claims > about the validity of mail coming from other servers -- note that most of > the SPF DNS records are of that type, and are basically just there to make > someone feel good), and that's when you are a corporation or similar > central organization with strict control over your e-mail addresses and an > absolute, enforced policy that no one shall ever use those e-mail > addresses in any context other than your central mail servers. > > There is one and only one case where you should ever use SPF to do > filtering, and that's if you know that you never forward any mail to that > account except through the complex SPF forwarders. > > This means that the number of people who can actually take advantage of > SPF, involving the intersection of those two cases, is small enough to > make it really difficult to find any motivation for deployment. I think you'll find it's larger than you expect. Note that the vast majority of mail users nowadays are either (a) using something like yahoo or hotmail, and (b) using corporate mail. Complicated mail setups are common for *us*, but not in general. -- .''`. ** Debian GNU/Linux ** | Andrew Suffield : :' : http://www.debian.org/ | `. `' | `- -><- |
Attachment:
signature.asc
Description: Digital signature