Re: [gentoo-dev] RFC: Supprting SPF on our mail servers

[Christian Birchinger]

I think the impact for the user isn't that small.
It would require me to install another mailclient setup
which is something i really dislike. I'd like to keep
one single setup for all my accounts.

SPF would only stop that people fake user@g.o addresses
in their FROM: line. It wouldn't stop virii or similar stuff.

I know this is my personal opinion but in this case the cost
of usability is too much.
I created SPF DNS entries for myself where it's usable. But
for @gentoo.org it's the wrong solution i think.

If gentoo would be a small group i'd suggest creating an
A record which includes all known mailservers of the devs
and then use a:allowedsmtp.gentoo.org or so. But i we're
too big for this.

On Fri, Mar 12, 2004 at 07:49:45AM -0500, Kurt Lieber wrote:
> All --
>
> I am seriously considering implementing and supporting SPF[1] on our mail
> servers.  SPF is an emerging standard designed to verify the FROM header on
> all incoming mails.  This helps protect against forged headers among other
> things.
>
> For the most part, this can be done without any significant impact on your
> day to day gentoo.org email lives.  However, the one (major) change will be
> that devs would be required to use asmtp on dev.gentoo.org rather than
> sending from a non-gentoo.org smtp server.
>
> We'd also have to change the way .forwards work a bit, but that's largely
> behind the scenes -- you'd still be able to forward all your mail on to
> another address.  The only change would be the envelope sender would now be
> changed at the time of forwarding whereas currently it is preserved.[2]
>
> So, at this point, I'm looking for comments, questions and criticisms about
> this proposed change.
>
> --kurt
>
> [1]http://spf.pobox.com
> [2]http://spf.pobox.com/faq.html



--
gentoo-dev@g.o mailing list