I know you're all excited to see another SIDF/SPF clarification question. :-)
The doc at http://www.openspf.org/SPF_vs_Sender_ID says:
"If you have published an v=spf1 policy to protect the use of your domain in the MAIL FROM and HELO addresses, Sender ID implementations that
apply your policy to PRA (per RFC 4406) will reject your mail if you use your domain in the "From" (or generally PRA) header field while sending
from (MAIL FROM) another system."
...but only if the "other system" IP is not included in the SPF record for your protected domain, right? Isn't that an important clarification
to make in that sentence? It makes it sound as if using third-party systems is impossible with SID.
And as an aside, why doesn't that page mention forwarding / mailing lists anywhere? Is that not one of the most common causes of problems with
SID (e.g. having to add a Sender header, etc)?
Also, regarding the quote above: isn't it only true if the policy uses -all? (Perhaps that's implied with "policy to protect the use of your
domain".)
Not trying to be critical, just wanting to know if I'm misunderstanding.
Perhaps the rewrite would be:
"If you have published a v=spf1 policy with the "-all" token to protect the use of your domain in the MAIL FROM and HELO addresses, and you send
mail from an IP not covered by your policy, and if you use your domain in the "From" header field (or, generally, the PRA), then Sender ID
implementations may apply your policy to the PRA (per RFC 4406) and may reject your mail.
If using "-all", you may also face rejection if your mail is forwarded through a system whose IP is not in your policy (e.g. a mailing list)."
Am I close??
Thanks,
-c
**
-------------------------------------------
Sender Policy Framework: http://www.openspf.org [http://www.openspf.org]
Modify Your Subscription: http://www.listbox.com/member/ [http://www.listbox.com/member/]
Archives: https://www.listbox.com/member/archive/1020/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1020/1311530-08394398
Modify Your Subscription: https://www.listbox.com/member/?member_id=1311530&id_secret=1311530-644bccd5
Unsubscribe Now: https://www.listbox.com/unsubscribe/?member_id=1311530&id_secret=1311530-512c0f9e&post_id=20101203205107:F57131DE-FF48-11DF-A6CE-E661F559ED1D
Powered by Listbox: http://www.listbox.com
The doc at http://www.openspf.org/SPF_vs_Sender_ID says:
"If you have published an v=spf1 policy to protect the use of your domain in the MAIL FROM and HELO addresses, Sender ID implementations that
apply your policy to PRA (per RFC 4406) will reject your mail if you use your domain in the "From" (or generally PRA) header field while sending
from (MAIL FROM) another system."
...but only if the "other system" IP is not included in the SPF record for your protected domain, right? Isn't that an important clarification
to make in that sentence? It makes it sound as if using third-party systems is impossible with SID.
And as an aside, why doesn't that page mention forwarding / mailing lists anywhere? Is that not one of the most common causes of problems with
SID (e.g. having to add a Sender header, etc)?
Also, regarding the quote above: isn't it only true if the policy uses -all? (Perhaps that's implied with "policy to protect the use of your
domain".)
Not trying to be critical, just wanting to know if I'm misunderstanding.
Perhaps the rewrite would be:
"If you have published a v=spf1 policy with the "-all" token to protect the use of your domain in the MAIL FROM and HELO addresses, and you send
mail from an IP not covered by your policy, and if you use your domain in the "From" header field (or, generally, the PRA), then Sender ID
implementations may apply your policy to the PRA (per RFC 4406) and may reject your mail.
If using "-all", you may also face rejection if your mail is forwarded through a system whose IP is not in your policy (e.g. a mailing list)."
Am I close??
Thanks,
-c
**
-------------------------------------------
Sender Policy Framework: http://www.openspf.org [http://www.openspf.org]
Modify Your Subscription: http://www.listbox.com/member/ [http://www.listbox.com/member/]
Archives: https://www.listbox.com/member/archive/1020/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1020/1311530-08394398
Modify Your Subscription: https://www.listbox.com/member/?member_id=1311530&id_secret=1311530-644bccd5
Unsubscribe Now: https://www.listbox.com/unsubscribe/?member_id=1311530&id_secret=1311530-512c0f9e&post_id=20101203205107:F57131DE-FF48-11DF-A6CE-E661F559ED1D
Powered by Listbox: http://www.listbox.com