Re: [courier-users] breaking smtp

On Mon, 5 Nov 2007, Lisa Muir wrote:

>>>> SPF is fairly effective at what it was designed to do.
>
> When it matures to a level where it has widespread adoption then we
> can all move from standalone to rejection based on spf knowing it is a
> protocol which will deliver what it promises.
>
>> SPF standalone doesn't really help anything.
>
> Yes it does. It helps the protocol mature through adoption. If
> everyone takes the "chicken and egg" approach it will never mature. It
> costs you nothing to put in place, put it in place and when it matures
> you'll reap the huge benefit. Sit and whine that it has nothing to
> offer immediate benefit, and we all lose out.

I'm questioning the theoretical benefit of it as much as the current
practical one. Until it starts being enforceable, it isn't really helping,
and setting up SPF records in DNS achieves equally little if nobody is
checking them and acting on them.

And considering that bouncing one false positive is typically viewed much
more dimly than accepting a hundred true negatives (we are certainly
achieving better rates than that without SPF), it doesn't take many
non-adopters to kill it off. Not to mention that a lot of perfectly
reasonable setups are liable to be non-compliant almost by design.

Gordan

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/.../courier-users