User avatar
luna the doggie neofox_snug therian @lunareclipse@snug.moe
1y
stalwart told her to add 2 SPF records to her domain while the RFC says if that's the case SPF always returns a perm error neofox_think_woozy
2
1
0
0
User avatar
pathetic piss kitten @kitten@elizabeth.cat
1y
@lunareclipse two records for the same domain? what the hell why would they say that
1
0
1
0
User avatar
pathetic piss kitten @kitten@elizabeth.cat
1y
@lunareclipse oh wait I just checked, an SPF for the base domain and an SPF for the hostname of the mail server

that shouldn't fail, but everyone will ignore the second one, since you aren't sending email from @mail.example.com
2
0
1
0
User avatar
luna the doggie neofox_snug therian @lunareclipse@snug.moe
1y
@kitten ooh in her setup those are the same domain
2
0
0
0
User avatar
pathetic piss kitten @kitten@elizabeth.cat
1y
@lunareclipse then she just needs one, yes
0
0
1
0
User avatar
Alba 🌸 v_pat @mildsunrise@tech.lgbt
1y
@lunareclipse @kitten honestly i can excuse them missing this edge case... i don't think I've ever seen a server's FQDN being (and its PTR pointing to) a naked domain
0
0
1
0
User avatar
Alba 🌸 v_pat @mildsunrise@tech.lgbt
1y
@kitten @lunareclipse SPF can be used to check two things: the HELO (or EHLO) identity, and the envelope from domain. honestly I've never cared about the former, maybe I missed something and it is used for something important or maybe they are just doing it to follow the RFC to the letter
2
0
2
0
User avatar
luna the doggie neofox_snug therian @lunareclipse@snug.moe
1y
@mildsunrise @kitten SPF in general seems obsolete in the age of DKIM but I think I heard some places will be upset if you don't have an SPF policy as a sender?
2
0
0
0
User avatar
pathetic piss kitten @kitten@elizabeth.cat
1y
@lunareclipse @mildsunrise everyone will be upset and cause chaos and destruction if you don't have an SPF

(except Gmail who seems to be either chill about it, or put you on Spam, or directly reject your mail depending on the day)
1
0
1
0
User avatar
princess pancake butterfly_​neofox_lesbian @natty@astolfo.social
1y
@kitten @lunareclipse @mildsunrise I wonder if you get our mail now neofox_woozy
💜1
1
0
0
1
User avatar
pathetic piss kitten @kitten@elizabeth.cat
1y
@natty @lunareclipse @mildsunrise oh I got it now and the other day as well, sorry, I received so many that I didn't answer all of them 🙈

but I have almost no sender verification setup yet, I just check dkim and dmarc, so don't let that guide you
1
0
2
0
User avatar
princess pancake butterfly_​neofox_lesbian @natty@astolfo.social
1y
@kitten @lunareclipse @mildsunrise ah neofox_woozy sorry
1
0
2
0
User avatar
princess pancake butterfly_​neofox_lesbian @natty@astolfo.social
1y
@kitten @lunareclipse @mildsunrise see we are paranoid at this point due to federated protocols just being terrible at testing
0
0
0
0
User avatar
Alba 🌸 v_pat @mildsunrise@tech.lgbt
1y
@lunareclipse @kitten huh, I'm curious why you think that. in my mind they are for different things: SPF authenticates SMTP transactions (therefore binding the envelope from) while DKIM authenticates mail messages (so it's typically the domain who authored the email that signs it). sometimes these two domains will be different, such as in the case of a mailing list forwarding a message
3
0
1
0
User avatar
Alba 🌸 v_pat @mildsunrise@tech.lgbt
1y
@lunareclipse @kitten if there is something that replaces SPF imo it would be DANE, not SPF
0
0
1
0
User avatar
luna the doggie neofox_snug therian @lunareclipse@snug.moe
1y
@mildsunrise @kitten huh. I'm honestly not that deep into understanding email
1
0
0
0
User avatar
princess pancake butterfly_​neofox_lesbian @natty@astolfo.social
1y
@lunareclipse @mildsunrise @kitten my understanding is that, in an analogy, SPF is like HTTP signatures of Fedi and DKIM is like LD signatures
💜1
0
0
0
1
User avatar
Emelia/Emi @becomethewaifu@tech.lgbt
1y
@mildsunrise @lunareclipse @kitten Yeah, and then there's DMARC, which says "what to do with it" depending on the results of both of those checks (Which can be "complain only" as DMARC also contains reporting functionality)
0
0
0
0