Educause Security Discussion mailing list archives
Re: Slate.com and SPF/DKIM to your root domain
From: "Graves, Rich" <rxgraves () IU EDU>
Date: Thu, 30 Aug 2018 19:27:41 +0000
I presume you mean http://technolutions.com/ Slate? Wherever possible, I'd prefer a subdomain like admissions.example.edu or marketing.example.edu. This is easier to manage, avoids cross-contamination of any abuse issues, and delays running into a hard technical limit: SPF implementations MUST limit the number of mechanisms and modifiers that do DNS lookups to at most 10 per SPF check, including any lookups caused by the use of the include mechanism or the redirect modifier. If this number is exceeded during a check, a PermError MUST be returned. The include, a, mx, ptr, and exists mechanisms as well as the redirect modifier do count against this limit. The all, ip4, and ip6 mechanisms do not require DNS lookups and therefore do not count against this limit. Rich Graves <rxgraves () iu edu> Principal Security Engineer https://OmniSOC.iu.edu/
Attachment:
smime.p7s
Description:
Current thread:
- Slate.com and SPF/DKIM to your root domain randy (Aug 30)
- <Possible follow-ups>
- Re: Slate.com and SPF/DKIM to your root domain Graves, Rich (Aug 30)
- Re: Slate.com and SPF/DKIM to your root domain Frank Barton (Aug 30)