[Operators] The Google issue

[Ralph Meijer]

David Banes <david at banes.org> wrote:
>
>On 22 Nov 2013, at 09:23, Simon Tennant <simon at buddycloud.com> wrote:
>> 
>>   - @server-developers: is there any way to whitelist gmail.com and
>all
>>   Google Apps Domains? - that way it's an operator decision if they
>choose to
>>   whitelist. What I mean is something like "If the SRV record points
>to
>>   xmpp-server.l.google.com and the alt domains, then use cleartext"
>Is
>>   this even possible?
>> 
>
>In the hosted email world we use white lists with custom connection
>profiles for various odd domains that we want or need to connect to and
>don't operate as they should. or to best practice.

The problem here is that whitelisting domains is cumbersome. You need to figure out if a domain is hosted by Google or not by resolving de SRV records, while respecting TTLs.


-- 
ralphm