SPF record in DNS?

[Stevehewitt]

Hey,

Wondered what the view was on this idea to reduce spoofing of emails:

http://www.theregister.com/content/6/36585.html

I'm not too sure on the in's and out's of it yet, but sounds like it may work...!

Steve.

 

[Dalong]

Yes, maybe. And then, maybe not.
Given the fact that LOTS of DNS servers are improperly configured, SPF configuration will undoubtedly suffer (and if you think "it will make them admins properly configure their servers", think again).
Then, with forwarding, relaying, adress changes and such, rejecting a mail from mydomain.org if it does not come from mydomain.org servers as registered in some SPF records will make a lot of good, nice and clean mails go into the trash.