[130473] in North American Network Operators' Group
Re: do you use SPF TXT RRs? (RFC4408)
daemon@ATHENA.MIT.EDU (John Adams)
Mon Oct 4 13:10:56 2010
In-Reply-To: <4CAA08B8.6060009@mtcc.com>
Date: Mon, 4 Oct 2010 10:05:29 -0700
From: John Adams <jna@retina.net>
To: Michael Thomas <mike@mtcc.com>
Cc: "nanog@nanog.org list" <nanog@nanog.org>,
Greg Whynott <Greg.Whynott@oicr.on.ca>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
We've seen percentage gains when signing with DK, and we carefully
monitor our mail acceptance percentages with ReturnPath. It's around
4-6%. I'd like to stop using it, but some people still check DK.
-j
On Mon, Oct 4, 2010 at 10:02 AM, Michael Thomas <mike@mtcc.com> wrote:
> On 10/04/2010 09:54 AM, John Adams wrote:
>>
>> Without proper SPF records your mail stands little chance of making it
>> through some of the larger providers, like gmail, if you are sending
>> in any high volume. You should be using SPF, DK, and DKIM signing.
>
> There should really be no reason to sign with DK too. It's historic.
>
>> I don't really understand how your security company related SPF to DoS
>> though. They're unrelated, with the exception of backscatter.
>
> Me either.
>
> Mike
>
>>
>> -j
>>
>>
>> On Mon, Oct 4, 2010 at 9:47 AM, Greg Whynott<Greg.Whynott@oicr.on.ca>
>> =A0wrote:
>>>
>>> A partner had a security audit done on their site. =A0The report said t=
hey
>>> were at risk of a DoS due to the fact they didn't have a SPF record.
>>>
>>> I commented to his team that the SPF idea has yet to see anything near
>>> mass deployment and of the millions of emails leaving our environment
>>> yearly, =A0I doubt any of them have ever been dropped due to us not hav=
ing an
>>> SPF record in our DNS. =A0When a client's email doesn't arrive somewher=
e, =A0we
>>> will hear about it quickly, =A0and its investigated/reported upon. =A0 =
=A0 =A0I'm
>>> not opposed to putting one in our DNS, =A0and probably will now - for
>>> completeness/best practice sake..
>>>
>>>
>>> how many of you are using SPF records? =A0Do you have an opinion on the=
ir
>>> use/non use of?
>>>
>>> take care,
>>> greg
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>
>
