Fwd: [Questions] Have you considered putting up SPF record for groups.cabforum.org
Dimitris Zacharopoulos (HARICA)
This looks like an issue for the infrastructure subcommittee.
Thanks,
Dimitris.
-------- Forwarded Message --------
| Subject: | [Questions] Have you considered putting up SPF record for groups.cabforum.org |
|---|---|
| Date: | Sat, 09 May 2026 01:52:31 +0200 |
| From: | 'Sebastian Robin Nielsen' via Questions <ques...@groups.cabforum.org> |
| Reply-To: | Sebastian Robin Nielsen <seba...@sebbe.eu> |
| To: | ques...@cabforum.org |
Have you considered publising a SPF record for groups.cabforum.org?
Every email from groups.cabforum.org contain a phish warn since the emails are completely unauthenticated (no DKIM or SPF).
Especially when things like votes on ballots are handled on that domain – which is kind of integrity sensitive.
Im just gettin’ the SOA record back when querying groups.cabforum.org for TXT:
; <<>> DiG <<>> TXT groups.cabforum.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24668
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;groups.cabforum.org. IN TXT
;; AUTHORITY SECTION:
cabforum.org. 900 IN SOA ns-56.awsdns-07.com. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400
;; Query time: 1071 msec
;; SERVER: 192.168.1.1#53(192.168.1.1) (UDP)
;; WHEN: Sat May 09 01:29:04 CEST 2026
;; MSG SIZE rcvd: 128
Something you have considered to increase the integrity of
CAB/F voting processes and discussions?
However the root domain have a valid SPF record:
; <<>> DiG <<>> TXT cabforum.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57077
;; flags: qr rd ra; QUERY: 1, ANSWER: 6, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;cabforum.org. IN TXT
;; ANSWER SECTION:
cabforum.org. 300 IN TXT "2htip4l64dabivf2272qet0ucu"
cabforum.org. 300 IN TXT "cisco-ci-domain-verification=3ccf485703c9f8a975db76eee2dde9f921442f04331a21dd1652506343835f8e"
cabforum.org. 300 IN TXT "google-site-verification=X4Msnv1EwfO5v3RYj8qtGd6CJbbqDRlKVyVxkPw963g"
cabforum.org. 300 IN TXT "m2cd3b17min0l6mb6jkd580t4s"
cabforum.org. 300 IN TXT "v=spf1 ip4:104.238.65.198/32 ip4:64.202.160.248/32 include:_spf.google.com include:amazonses.com -all"
cabforum.org. 300 IN TXT "voflksiio1ltvmoh409fjkklj3"
;; Query time: 35 msec
;; SERVER: 192.168.1.1#53(192.168.1.1) (UDP)
;; WHEN: Sat May 09 01:37:36 CEST 2026
;; MSG SIZE rcvd: 459
Maybe copy the SPF record ” v=spf1 ip4:104.238.65.198/32 ip4:64.202.160.248/32 include:_spf.google.com include:amazonses.com -all” into groups.cabforum.org?
Best regards Sebastian Robin Nielsen