Re: @debian.org mail
Sam Hartman <hartmans@debian.org> writes:
>>>>>> "Daniel" == Daniel Lange <DLange@debian.org> writes:
> Daniel> To do better, we should really offer SMTP submission/IMAP
> Daniel> services for @debian.org as soon as possible and - after a
> Daniel> grace period - publish a mx -all SPF record.
> Actually publishing the SPF record seems fairly problematic.
A possibly useful compromise is to do what Marco suggested: publish SPF
records for domains like lists.debian.org, where all the mail is coming
from Debian infrastructure. That can easily be -all. And then at least
we have the option of moving some of the most important official mail
messages (password reset links and so forth) to a subdomain with -all SPF
records, without affecting the flow of @debian.org mail.
(The same all applies to DKIM, of course, and DKIM is probably more
generally useful these days. SPF is slowly dying in favor of DKIM most
places.)
--
Russ Allbery (rra@debian.org) <http://www.eyrie.org/~eagle/>
Reply to: