DNS *is* the central database - it's just distributed. If I needed to find an SPF record for AOL, I'd first check with the TLD servers and find out who holds the SOA records for aol.com. Next, I'd ask those servers for the TXT record. Unless someone hacks their records, or runs a middle man attack, I'm certain to have the correct information.

It's actually pretty safe and secure. The real downside is a lack of relay support.

At 12/21/2005 09:58 AM, you wrote:
I'm not an SPF or DNS expert, but I am pretty good at logic.

SPF is a failure. The forgot the key component that would have made it work... registration with a central database. The way it stands anybody can create any valid SPF record they choose. Spammers can create them just as easily. Since there's no checking against a central database it makes the whole thing worthless in my opinion.

About the only thing SPF does is increase DNS traffic.

You can't count SPF failure against a message or you'd be blocking a LOT of valid messages.

You can't accept SPF pass as anything good.  A LOT of spam passes SPF.

Just my humble opinion. It was a good idea that they stopped short of making useful.

-Joe
----- Original Message ----- From: "Marc Funaro" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Tuesday, December 20, 2005 7:21 AM
Subject: [IMail Forum] An update on SPF


Hi Everyone,

I've been out of the loop for a while, but would now like to ask the imail
community -- is the SPF-worth-it debate settled down?  Is it worth the time
now to set up SPF records, and is it reducing spam?  We have about 100
domains, and setting up SPF for all of them will be time consuming, but if
it is now implemented and used by enough ISPs/etc., we have the time and
resources to do it at this point.  Just looking for opinions... But let's
not turn this into a flamefest or anything :)

Thanks for your time,

Marc


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to