It appears that Grant Taylor via mailop <gtay...@tnetconsulting.net> said: >-=-=-=-=-=- >-=-=-=-=-=- > >On Sep 15, 2022, at 9:57 PM, Cyril - ImprovMX via mailop >> As someone whose addresses is regular forged in spam: NO. > >On 9/16/22 7:18 AM, Bill Cole via mailop wrote: >> +1 > >I thought that we were to a point that SPF was mitigating a lot of >out-and-out forgeries. At least between purported senders that publish >sufficiently strict SFP records and recipients that honor said SPF records.
Nope. SPF is somewhat useful as a signal that "this is real" but it is not useful, and -all is particularly not useful, as a signal that something is fake.* There are way too many ways to send real mail that SPF cannot handle. That's one of the reasons we have DKIM and DMARC, and we all know how much pain they have caused for mailing list mail that recipients actively want. R's, John * - 0ther than a single -all meaning you send no mail at all, but that's a corner case. _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
