[130465] in North American Network Operators' Group
do you use SPF TXT RRs? (RFC4408)
daemon@ATHENA.MIT.EDU (Greg Whynott)
Mon Oct 4 12:48:10 2010
From: Greg Whynott <Greg.Whynott@oicr.on.ca>
To: "nanog@nanog.org list" <nanog@nanog.org>
Date: Mon, 4 Oct 2010 12:47:52 -0400
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
A partner had a security audit done on their site. The report said they we=
re at risk of a DoS due to the fact they didn't have a SPF record. =20
I commented to his team that the SPF idea has yet to see anything near mass=
deployment and of the millions of emails leaving our environment yearly, =
I doubt any of them have ever been dropped due to us not having an SPF reco=
rd in our DNS. When a client's email doesn't arrive somewhere, we will he=
ar about it quickly, and its investigated/reported upon. I'm not oppo=
sed to putting one in our DNS, and probably will now - for completeness/be=
st practice sake.. =20
how many of you are using SPF records? Do you have an opinion on their use=
/non use of?
take care,
greg