Educause Security Discussion mailing list archives

Re: Slate.com and SPF/DKIM to your root domain


From: "Graves, Rich" <rxgraves () IU EDU>
Date: Thu, 30 Aug 2018 19:27:41 +0000

I presume you mean http://technolutions.com/ Slate?

Wherever possible, I'd prefer a subdomain like admissions.example.edu or
marketing.example.edu. This is easier to manage, avoids cross-contamination
of any abuse issues, and delays running into a hard technical limit:

SPF implementations MUST limit the number of mechanisms and modifiers that
do DNS lookups to at most 10 per SPF check, including any lookups caused by
the use of the “include” mechanism or the “redirect” modifier. If this
number is exceeded during a check, a PermError MUST be returned. The
“include”, “a”, “mx”, “ptr”, and “exists” mechanisms as well as the
“redirect” modifier do count against this limit. The “all”, “ip4”, and “ip6”
mechanisms do not require DNS lookups and therefore do not count against
this limit.

Rich Graves <rxgraves () iu edu>
Principal Security Engineer
https://OmniSOC.iu.edu/

Attachment: smime.p7s
Description:


Current thread: