Re: [spfbis] WGLC: draft-ietf-spfbis-4408bis-14 - Fully parse record *first*

Stuart Gathman <stuart@gathman.org> Mon, 22 April 2013 01:21 UTC

Return-Path: <SRS0=52O0n=OJ==stuart@gathman.org>
X-Original-To: spfbis@ietfa.amsl.com
Delivered-To: spfbis@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8320F21F86AD for <spfbis@ietfa.amsl.com>; Sun, 21 Apr 2013 18:21:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level:
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jkzTzt5NHgrl for <spfbis@ietfa.amsl.com>; Sun, 21 Apr 2013 18:21:53 -0700 (PDT)
Received: from mail.gathman.org (gathman.marcomm.net [IPv6:2001:470:8:688::10]) by ietfa.amsl.com (Postfix) with ESMTP id 2F0D321F875C for <spfbis@ietf.org>; Sun, 21 Apr 2013 18:21:53 -0700 (PDT)
Authentication-Results: mail.gathman.org; auth=pass (PLAIN sslbits=256) smtp.auth=stuart
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gathman.org; i=@gathman.org; q=dns/txt; s=default; t=1366593722; h=Message-ID : Date : From : MIME-Version : To : Subject : References : In-Reply-To : Content-Type : Content-Transfer-Encoding : Date : From : Subject; bh=uf1ELnvzBvqL/aacenilZuvXy5VOa17ZzABtr6nLTLw=; b=TmFbd4jSeWseRn7Usb/zrxBryn5b9QpRHrh4voBdl5/zZvJTjgIl1ba0LmUdAAe8q1qq1N cYBSlnbkB6Hdo16S/ys5P8MyWWrwHk5Q/OwSGU8NeMVUUMARMtGNau3IHhCzDMYUX9ChDaJa q7jYgmx83yOFpOdmii14++PJPMfEo=
Received: from silver.gathman.org ([IPv6:2001:470:8:809:792e:665c:d618:15ec]) (authenticated bits=0) by mail.gathman.org (8.14.4/8.14.4) with ESMTP id r3M1Lvmb008243 (version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=NO) for <spfbis@ietf.org>; Sun, 21 Apr 2013 21:22:02 -0400
Message-ID: <517490A6.5020502@gathman.org>
Date: Sun, 21 Apr 2013 21:21:42 -0400
From: Stuart Gathman <stuart@gathman.org>
Organization: BWI Corporation
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:17.0) Gecko/20130311 Thunderbird/17.0.4
MIME-Version: 1.0
To: spfbis@ietf.org
References: <20130409062431.GK24624@mx1.yitter.info> <CAJ4XoYd2r7=Vd3Ge4JZie=Hz6+JupDR-OkuSRzRkyuk+5KHrKA@mail.gmail.com> <7FE87BAF-B202-4CD5-B7BA-EDABE151E142@eudaemon.net> <CAJ4XoYegUT5WRmD_OuimM2Rzx9FBrbhMH2vqkAQx-7o3gnuVeA@mail.gmail.com> <6.2.5.6.2.20130416214029.0c16f0b8@resistor.net>
In-Reply-To: <6.2.5.6.2.20130416214029.0c16f0b8@resistor.net>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
Subject: Re: [spfbis] WGLC: draft-ietf-spfbis-4408bis-14 - Fully parse record *first*
X-BeenThere: spfbis@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: SPFbis discussion list <spfbis.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spfbis>, <mailto:spfbis-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/spfbis>
List-Post: <mailto:spfbis@ietf.org>
List-Help: <mailto:spfbis-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spfbis>, <mailto:spfbis-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 22 Apr 2013 02:07:30 -0000

On 04/17/2013 12:50 AM, S Moonesamy wrote:
>
> As Scott mentioned, things have been very quiet for this WGLC.  It 
> helps if there are people who read the draft as you did above as I can 
> determine whether the working group reviewed the draft and is ok with it.
Minor nit:

Section 5.1

Mechanisms listed after "all" MUST be ignored.

Sure, section 4.6 says

If there are any syntax errors
    anywhere in the record, check_host() returns immediately with the
    result "permerror", without further interpretation.

But an implementer could misinterpret this as saying the following 
should get Fail rather than PermError:

v=spf1 mx -all foobar

Section 4.6 doesn't make it clear you have to parse everything 
(returning permerror on syntax errors), and only *then* interpret. The 
wording makes it sound like you could parse and interpret one term at a 
time, stopping when you get a match or syntax error.