Inline SPF service provider designation
Sender Policy Framework (SPF) is one of the most widely used methods of distinguishing electronic mail that is authorized by the purported sending domain from unauthorized mail. SPF policies are published into a domain's DNS and then looked up and evaluated by mail receivers. Due to the complexity and limitations of the SPF specification, implementation mistakes are widespread. This problem is compounded by the common practice of nesting SPF policies which introduces hidden risks, particularly exceeding DNS lookup limits. To address these issues, inline service provider designation may be configured to capture the benefits of existing techniques without their associated costs. Additionally, the domain owner may enjoy simplified SPF service provider onboarding and policy failover redundancy to protect against SPF service provider disruptions, thus improving policy availability uptime.
1. A method comprising:
providing at least one active policy service term for inclusion in a Sender Policy Framework (SPF) policy used to delegate functional policy hosting and management to an administratively independent domain,
wherein the at least one active policy service term is provided for insertion into the SPF policy prior to a pre-existing policy term of the administratively independent domain,
and wherein the at least one active policy term is created based on one or more of:
the pre-existing policy term in a same Domain Name System (DNS) record as the SPF policy,
a policy term in an adjacent DNS record, or
a policy term in an adjacent DNS row.
2. The method of claim 1 , further comprising onboarding an SPF service provider without removal of an existing SPF record.
3. The method of claim 2 , wherein onboarding the SPF service provider comprises prepending the at least one active policy service term to the pre-existing policy term of the existing SPF record.
4. The method of claim 1 , wherein the at least one active policy service term is comprised of a service designation term from an SPF service provider.
5. The method of claim 4 , wherein the at least one active policy service term further comprises a virtual all term.
6. The method of claim 5 , wherein the virtual all term is configured to fail open to enable a pass-through policy evaluation of the pre-existing policy term when the SPF service provider is irresponsive.
7. The method of claim 1 , wherein the inclusion of the at least one active policy service term keeps the pre-existing policy term.
8. The method of claim 7 , wherein the pre-existing policy term remains as a redundant back-up in the event the administratively independent domain is unresponsive.
9. The method of claim 1 , wherein the pre-existing policy term of the administratively independent domain remains inactive and is not evaluated subsequent to a match provided by the at least one active policy service term.
10. The method of claim 9 , wherein inserting the at least one active policy service term comprises moving the pre-existing policy term to an adjacent DNS line.
11. The method of claim 1 , wherein inserting the at least one active policy service term comprises moving the pre-existing policy term to an adjacent DNS record.
12. The method of claim 1 , wherein the pre-existing policy term of the administratively independent domain comprises a high-level term that allows the pre-existing policy term to be hosted under a different domain name.
13. One or more non-transitory computer readable media comprising instructions which, when executed by one or more hardware processors, causes performance of operations comprising:
providing at least one active policy service term for inclusion in a Sender Policy Framework (SPF) policy used to delegate functional policy hosting and management to an administratively independent domain,
wherein the at least one active policy service term is provided for insertion into the SPF policy prior to a pre-existing policy term of the administratively independent domain,
and wherein the at least one active policy term is created based on one or more of:
the pre-existing policy term in a same Domain Name System (DNS) record as the SPF policy,
a policy term in an adjacent DNS record, or
a policy term in an adjacent DNS row.
14. The one or more computer readable media of claim 13 , wherein the at least one active policy service term is comprised of a service designation term from an SPF service provider.
15. The one or more computer readable media of claim 14 , wherein the at least one active policy service term further comprises a virtual all term.
16. The one or more computer readable media of claim 15 , wherein the virtual all term is configured to fail open to enable a pass-through policy evaluation of the pre-existing policy term when the SPF service provider is irresponsive.
17. The one or more computer readable media of claim 13 , wherein the inclusion of the at least one active policy service term keeps the pre-existing policy term.
18. The one or more computer readable media of claim 13 , wherein the pre-existing policy term of the administratively independent domain remains inactive and is not evaluated subsequent to a match provided by the at least one active policy service term.
19. The one or more computer readable media of claim 13 , wherein inserting the at least one active policy service term comprises moving the pre-existing policy term to an adjacent DNS line.
20. The one or more computer readable media of claim 13 , wherein the pre-existing policy term of the administratively independent domain comprises a high-level term that allows the pre-existing policy term to be hosted under a different domain name.