[BALUG-Admin] linuxmafia.com & SPF (was: BALUG & SPF)
Rick Moen
rick@linuxmafia.com
Mon Aug 21 11:52:42 PDT 2017
I wrote:
> The dedicated SPF RR does exist as an IETF spec.
Update: Discontinued in 2014 -- and I would suggest this was probably
because of the considerations I cited. Reference:
https://tools.ietf.org/html/rfc7208#section-3.1
https://tools.ietf.org/html/rfc6686#appendix-A
Quoting the former:
SPF records MUST be published as a DNS TXT (type 16) Resource Record
(RR) [RFC1035] only. The character content of the record is encoded
as [US-ASCII]. Use of alternative DNS RR types was supported in
SPF's experimental phase but has been discontinued.
In 2003, when SPF was first being developed, the requirements for
assignment of a new DNS RR type were considerably more stringent than
they are now. Additionally, support for easy deployment of new DNS
RR types was not widely deployed in DNS servers and provisioning
systems. As a result, developers of SPF found it easier and more
practical to use the TXT RR type for SPF records.
In its review of [RFC4408], the SPFbis working group concluded that
its dual RR type transition model was fundamentally flawed since it
contained no common RR type that implementers were required to serve
and required to check. Many alternatives were considered to resolve
this issue, but ultimately the working group concluded that
significant migration to the SPF RR type in the foreseeable future
was very unlikely and that the best solution for resolving this
interoperability issue was to drop support for the SPF RR type from
SPF version 1. See Appendix A of [RFC6686] for further information.
The circumstances surrounding SPF's initial deployment a decade ago
are unique. If a future update to SPF were developed that did not
reuse existing SPF records, it could use the SPF RR type. SPF's use
of the TXT RR type for structured data should in no way be taken as
precedent for future protocol designers. Further discussion of
design considerations when using new DNS RR types can be found in
[RFC5507].
Which also prompts a correction to my earlier post: I'm pretty sure I
added my SPF RR immediately upon Meng Wong finishing the SPF spec in
2003, and not in 2010 as I said earlier.
More information about the BALUG-Admin
mailing list