The Future of SPF and SIDF

nobaloney

NoBaloney Internet Svcs - In Memoriam †
Joined
Jun 16, 2003
Messages
24,989
Location
California
After attending several meetings at the ISP.CON in Santa Clara, Calif., for the past few days, and meeting with Meng Wong, the inventor of SPF, and with Harry Katz, the Microsoft Representative who was there explaining Server ID Framework (SIDF), I have a fairly clear idea of where we should be going with both SPF and with SIDF.

Implementing SPF for outgoing email is actually quite easy, though I'm not sure if there's an easy way to implement the idea adriaan broiught up on October 19th in this thread.

However I like his suggestion, and I recommend that either John or Mark figure out a way to do it this way, perhaps asking somewhere in the setup process for the domain to use, OR by creating a DNS record creation template in the DNS system specifically for creating SPF records.

As for SIDF, there are rather complex problems involved.

Unfortunately, IBM has applied for patents on part of the SIDF technology, and the open source license under which exim is published is not compatible with including patented technology. If you include patented technology in your exim.conf file then you lose your right to use exim with that exim.conf file.

But...

Meng suggests that there's no reason to implement SIDF on the server-side; that it works better on the MUA side.

I'm going to bring this post to John's attention, and hopefully we can open a discourse on getting a better SPF implementation for sent email as soon as possible.

If you're interested in implementing SPF for received email you can do that by editing the exim.conf file. I won't be making any changes to implement SPF for some time yet; as those of you who are following my posts on SpamBlocker know, I still have a bit of a way to go on my own exim.conf system.

Jeff
 
Back
Top