On 01/24/2018 03:45 PM, Joseph Brennan wrote:
The New York Times nytimes.com has a SPF record with too many DNS lookups. Are you willing to block that? That one amazes me since SPF is the simplest of these ventures to implement correctly, and since the Times's frequent mailings of news updates evidently are not affected enough by SPF fail for the Times to go fix it.

On 24.01.18 16:04, David Jones wrote:
The key point here is the bulk nytimes.com email that is system generated, i.e. not humans with real mailboxes that could be compromised, is from subdomains so this entry would be safe since they do have good SPF records on subdomains:

whitelist_auth *@*.nytimes.com

this only applies when SPF succeeds so it won't fix their broken SPF :-)

--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Windows 2000: 640 MB ought to be enough for anybody

Reply via email to