#991013 spf-tools-perl: SPFv2 is not preferred over SPFv1

Package:
spf-tools-perl
Source:
mail-spf-perl
Submitter:
Evgeniy Berdnikov
Date:
2021-07-16 19:09:03 UTC
Severity:
normal
#991013#5
Date:
2021-07-12 19:59:32 UTC
From:
To:
Dear Maintainer,

if sender's domain has two SPF records, one v1 and other v2, then
spf-tools-perl choses one of this records for check, namely, that one
that is listed *first* in DNS reply. This behaviour violates RFC 4406,
section 4.4, "Record Selection":

   4. If the lookup returned two records, one containing the "v=spf1"
      version identifier and the other containing the "spf2" version
      identifier, the "spf2" version takes precedence for the desired
      scope-id.  If the "spf2" record does not contain the desired
      scope-id, then the "v=spf1" record is selected.

With "-v 1 " or "-v 2" command line options spf-tools-perl behaves right.

Moreover, SPFv2 did not pass from draft to standard, and is considered
nowadays as dead technology. So it seems reasonable to chande default
operation of spf-tools-perl to check SPFv1 only.