Mailing List Archive

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

dave wanta wrote:
> (this is probably an idot question) but could someone provide a link(s)
> to the current SPF spec(s)?
>
> I must be blind, because I cannot find it (them) on www.openspf.org

It's called "draft-schlitt-spf-classic" and you can get it here:

http://www.openspf.org/rfcs.html

(Yeah, the link to that page is a bit small and hard to spot. We're
already working on a new website.)

> Also, I noticed AOL publishes 2 text records:
> v=spf1 and
> spf2.0/pra
>
> So are there 2 specs now?
> I checked http://www.openspf.org/faq.html, and it doesn't mention
> anything about spf2.0 or pra.

"spf2.0" is Microsoft's "Sender-ID". The only additional feature it has
over SPF is checking of the PRA identity, which is essentially one address
form the Sender:/From:/Resent-Sender:/Resent-From: headers. S-ID wants to
be backwards compatible to SPF by re-using "v=spf1" records, but it does
so in an incompatible and potentially harmful way. So far, few people
have published "spf2.0" records, and "v=spf1" records really shouldn't be
used for PRA checking, so I'd recommend just using SPF (AKA
draft-schlitt-spf-classic).

Julian.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)

iD8DBQFEHBaBwL7PKlBZWjsRAmufAJ9eIW3xRyTc0n4RjUcJX48QT6RzlQCgwH9b
WrqzjBdQ2i7fm2oV6iAdiIk=
=d+bO
-----END PGP SIGNATURE-----

-------
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname=spf-devel@v2.listbox.com

Thanks a bunch!

Cheers!
Dave



----- Original Message -----
From: "Julian Mehnle" <julian@mehnle.net>
To: <spf-devel@v2.listbox.com>
Sent: Saturday, March 18, 2006 9:17 AM
Subject: Re: [spf-devel] spf spec


> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> dave wanta wrote:
> > (this is probably an idot question) but could someone provide a link(s)
> > to the current SPF spec(s)?
> >
> > I must be blind, because I cannot find it (them) on www.openspf.org
>
> It's called "draft-schlitt-spf-classic" and you can get it here:
>
> http://www.openspf.org/rfcs.html
>
> (Yeah, the link to that page is a bit small and hard to spot. We're
> already working on a new website.)
>
> > Also, I noticed AOL publishes 2 text records:
> > v=spf1 and
> > spf2.0/pra
> >
> > So are there 2 specs now?
> > I checked http://www.openspf.org/faq.html, and it doesn't mention
> > anything about spf2.0 or pra.
>
> "spf2.0" is Microsoft's "Sender-ID". The only additional feature it has
> over SPF is checking of the PRA identity, which is essentially one address
> form the Sender:/From:/Resent-Sender:/Resent-From: headers. S-ID wants to
> be backwards compatible to SPF by re-using "v=spf1" records, but it does
> so in an incompatible and potentially harmful way. So far, few people
> have published "spf2.0" records, and "v=spf1" records really shouldn't be
> used for PRA checking, so I'd recommend just using SPF (AKA
> draft-schlitt-spf-classic).
>
> Julian.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.2.2 (GNU/Linux)
>
> iD8DBQFEHBaBwL7PKlBZWjsRAmufAJ9eIW3xRyTc0n4RjUcJX48QT6RzlQCgwH9b
> WrqzjBdQ2i7fm2oV6iAdiIk=
> =d+bO
> -----END PGP SIGNATURE-----
>
> -------
> To unsubscribe, change your address, or temporarily deactivate your
subscription,
> please go to
http://v2.listbox.com/member/?listname=spf-devel@v2.listbox.com
>

-------
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname=spf-devel@v2.listbox.com