Bikrant Neupane wrote:
But chances are that spammers may publish their spf record and start spamming.
That's a common misconception about SPF (mostly promulgated it seems by the opponents of SPF). SPF is all about preventing forgery and only incidently may be somewhat useful to stop outright spam.
What is far more likely is that spammer will find the lazy administrators who set up an SPF record with '-all' and use those domains exclusively to forge their return addresses. Of course, that in itself will lead to sites using SPF to discount *any* record containing '-all' so spammers will not be able to use this for very long.
John
