Sam Hartman <hartm...@debian.org> writes: >>>>>> "Daniel" == Daniel Lange <dla...@debian.org> writes:
> Daniel> To do better, we should really offer SMTP submission/IMAP > Daniel> services for @debian.org as soon as possible and - after a > Daniel> grace period - publish a mx -all SPF record. > Actually publishing the SPF record seems fairly problematic. A possibly useful compromise is to do what Marco suggested: publish SPF records for domains like lists.debian.org, where all the mail is coming from Debian infrastructure. That can easily be -all. And then at least we have the option of moving some of the most important official mail messages (password reset links and so forth) to a subdomain with -all SPF records, without affecting the flow of @debian.org mail. (The same all applies to DKIM, of course, and DKIM is probably more generally useful these days. SPF is slowly dying in favor of DKIM most places.) -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>
