spf ent txt records.

Vernon Schryver vjs at rhyolite.com
Mon Mar 18 00:38:32 UTC 2013


> 20741,  so direct SPF RR hits is about one third of those using TXT RR,
> small, but, insignificant? I wouldn't really say so, but some might.  I
> suspect the SPF wanting to be deprecated is because of the lack of
> take-up, due to lazy admins, there are some resolvers in use from
> ancient debian boxes that are so old, they dont understand the SPF RR,
> yes I know, they have bigger problems than that, but, again, comes down
> to laziness, DNS is not rocket science, I'm sure given ARM and access to
> google, a 13yo kid could get at least the "basics" right.

Laziness?--nonsense.  Postel's Law and simple logic predict the
deprecating of the SPF type as well as the continued practice of
publishing only TXT records by those with rational reasons to publish
SPF data.

 1. SMTP servers (mail receivers) that have wanted to honor SPF -all
   been forced to look for for SPF data in TXT records since the
   beginning.  There have been far more TXT records with SPF data
   than SPF records.  Therefore, the best course for SMTP servers
   has been to request TXT and only request SPF if the TXT request
   gives NODATA.  Requesting both SPF and TXT types would cost extra
   bandwidth and raise questions about what to do if both are present
   and differ.  Occassional differences between SPF and TXT are
   inevitable due to caching in recursive resolvers even when the
   authoritative server always changes both simultaneously.

 2. Rational operators of SMTP clients (mail senders) know that well
   maintained SMTP servers understand #1 and so request TXT first or
   request neither SPF nor TXT.
   Publishing only SPF type records would double an SMTP client's
   DNS costs.
   Pubishing both SPF and TXT would not help well mantained SMTP
   servers, but cost maintenance complexity and so potential errors.
   Therefore, it is best to publish only TXT for well maintained
   SMTP servers.
   Badly maintained SMTP servers are likely to only check TXT records.

Unlike the situations with IPv6 and DNSSEC, there are only costs
and no benefits for rational operators SMTP clients or servers to
change those two tactics.

Those interested in wider perspectives about SPF and TXT RRs than any
single domain or the perceptions of SPF enthusiasts might consider the
tables reporting surveys in RFC 6686.  One can ignore everything
specifically about SenderID and read only about popularity of SPF and
TXT records.  https://www.rfc-editor.org/rfc/rfc6686.txt


Vernon Schryver    vjs at rhyolite.com



More information about the bind-users mailing list