[spfbis] New issue: 8.4. Fail: rejection is not described explicitly

[Alessandro Vesely <[e-mail]>]

Appendix H.2 should be merged into Section 8.4, as the reason to keep
them separate was beaten out by Murray's reorganization.  I mentioned
that in my review.

In addition, the combined text is not explicit in describing how
reject-on-fail works when enabled.  H.2 says "rejection can be done
before the SMTP content is transferred."  Explicit would be to to say
that the negative response can be given to either the MAIL or the RCPT
commands.

Of course, it is also possible to reject after receiving the content.
It is not typical of SPF implementations to do so.  Early rejection may
conflict with DMARC and similar policies, and the point of this issue is
that an explicit note can save readers the time to puzzle it out
themselves, and possibly avoid some misunderstanding.