Re: [spfbis] New issue: 8.4. Fail: rejection is not described explicitly

[Alessandro Vesely <[e-mail]>]

On Tue 23/Apr/2013 11:52:42 +0200 Scott Kitterman wrote:
> On Tuesday, April 23, 2013 09:59:13 AM Alessandro Vesely wrote:
>> 
>> OLD:
>>  [...] Typically, such checks are done by a receiving MTA,
>>        but can be performed elsewhere in the mail processing chain
>>        so long as the required information is available and reliable.
>>  [...]
>> 
>> _Note_ that I'm not proposing that change.  I'm asking if a change
>> like that would clear this issue.
> 
> I don't see where it helps and it loses the point about doing the check in the 
> MTA being better than post-processing, which I think is important, so -1 from 
> me.

Yes, I left it off because it has nothing to do with the rest of the
definitions.  I agree it is an important point, but it is covered in
Section 2.5 "Location of Checks", not Section 2.4.

The issue here is that it is not crystal clear what are the SPF
results.  The introduction of the terms primary/secondary is probably
bad.  However, where do we say that the following line is wrong:

   Authentication-Result: spf=pass
      smtp.mailfrom=[e-mail];
?