#11: SPF checking of the HELO identity shall be explicitly allowed
The SPFv1 specification shall allow SPF checking on HELO. If the HELO hostname is an FQDN, and if that hostname has an SPF record, a receiver MAY perform an SPF HELO check.
Rationale: It has been that way ever since Hector Santos convinced the SPF project of doing it that way, and if the SPFv1 specification is to document existing practice, then it should include that.
(Proposed on 2004-12-04 by Meng Weng Wong, passed unanimously.)
<freeside> ok, for clarification purposes, i'm going to propose a vote 2150a:
that the Official SPFv1 Spec, however it may eventually hatch,
should allow SPF checking on HELO. if the HELO hostname is an
FQDN, and if that hostname has an SPF record, a receiver MAY
perform an SPF/HELO check. i mean, it's been that way ever since
Hector hectored us into doing it that way, and if the SPFv1 spec is
to document existing practice, then it should include that.
<grumpy> freeside: I agree
<freeside> (maybe we can hatch an SPFv1 draft as two drafts: one,
spf-protocol, and another, spf-usage, which discusses the helo and
the mail-from scopes.)
<Julian> Also, I think freeside is right with 2150a. ;-)
<Julian> freeside: Does 2150a imply that HELO has to be resolvable to an A
record? Or just to an SPF record?
<freeside> just an SPF record, no A record
<freeside> the resolution to an A record is done in 2821, we don't need to do
that
<grumpy> the A record requirement is a Receiver Policy.
<Julian> Good, so I could set my MTA to say "HELO domain" instead of "HELO
mta.domain", and thus just re-use my classic SPF record?
<freeside> yes.
<freeside> that's what works for hotmail now.
<Julian> I like that.
<freeside> i mean, you may violate 2821, but that's between you and 2821.
<MarkK> as long as "domain" is a FQDN
<Julian> Yeah, of course.
<MarkK> is 2150a on the floor now?
<Julian> Ok, do we want to vote on 2150a?
* grumpy seconds 2150a
<MarkK> 2150a: yes
<grumpy> 2150a: yes
<Julian> 2150a: yes (although freeside hasn't called for the vote)
<freeside> okay, good
<freeside> 2150a: yes
<freeside> so, we've made some progress