james-server-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Norman Maurer ...@byteaction.de>
Subject Re: [spf-devel] Re: SPF and maximum dns lookups per record (includes)
Date Sun, 16 Jul 2006 18:31:03 GMT

> Norman Maurer wrote:
> > we developed a java implementation for spf called jSPF. Version 0.9b1
> > wil be released next week if nothing goes wrong.. Now someone open a bug
> > report which report us that microsoft.com return a permError cause the
> > maximum includes of 10 is to less.. But i think the bugreport is invalid
> > cause the specs are really clear on this..
> You are absolutely correct, the microsoft.com records are invalid -- hard 
> to believe but true.  And I think it is important that implementations and 
> their users NOT begin to weaken their lookup limits, because otherwise 
> more and more domains will begin to ignore the lookup limits, in turn 
> again causing other implementations to have to raise, or entirely get rid 
> of, their limits.

I fully agree.. if is in RFC we should not "break" it.

> The limits are a necessary evil that serve the purpose of mitigating the 
> risks of DoS attacks.

Thx for the reply.. i just wanted to get sure :-)


View raw message