On Wed, Oct 16, 2024 at 9:04 AM Dave Crocker via mailop <mailop@mailop.org> wrote:
> While SPF is entrenched, and challenges to its use typically gets a > casual claim that it provides incremental benefit where DKIM fails, I > believe there is no published data demonstrating that the incremental > benefit is real and substantial, never-mind enough to warrant adding its > complexity to the mix of email operations challenges. > > Please consider: If SPF were deprecated, was would be the actual, > significant effects on email anti-abuse processes? > The most meaningful utility of SPF at the moment I think is to help identify DKIM replay cases. There may be ways to make DKIM more resistant to that, I know some of my former colleagues have proposed some things along those lines, but that's the world we have today. I do think for "simple" senders, SPF is easier to configure than DKIM, as it doesn't require any code or key generation. Whether that is sufficient, I don't know. Brandon
_______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
