In article <27d11417-6cdf-62cf-3d97-7a4e5581b...@blakjak.net> you write:
>Perhaps i've missed something, but isn't the whole point of SPF that if 
>a _sender domain_ publishes a -all SPF record, that any platform using 
>SPF is _supposed to reject email that doesn't pass_ ?

Ten years ago there were people who believed that.  I'm dismayed to
see people still saying that today.

SPF tells you where the sender asserts that its mail will come from.
That's fine as far as it goes, but most senders do not actually
understand mail very well, and their assertions are wrong.  There is a
school of thought along the lines of "tough noogies, if their SPF
tells you to drop legit mail that's their problem", but that's a good
way to make your mail users find a provider who's less wedged.

An SPF pass is a reasonably strong signal that the mail did come from
the purported source.  An SPF fail doesn't tell you much.

R's,
John

_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Reply via email to