IETF Logo Mail Archive

Re: [arc] ARC path header

John R Levine <johnl@taugh.com> Mon, 13 September 2021 21:07 UTC

Return-Path: <johnl@taugh.com>
X-Original-To: arc@ietfa.amsl.com
Delivered-To: arc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A55A53A0E14 for <arc@ietfa.amsl.com>; Mon, 13 Sep 2021 14:07:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.1
X-Spam-Level:
X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=iecc.com header.b=w9Z21gop; dkim=pass (2048-bit key) header.d=taugh.com header.b=o7e1cCOC
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XgD7hrQam1sb for <arc@ietfa.amsl.com>; Mon, 13 Sep 2021 14:07:11 -0700 (PDT)
Received: from gal.iecc.com (gal.iecc.com [IPv6:2001:470:1f07:1126:0:43:6f73:7461]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B2D013A0E0D for <arc@ietf.org>; Mon, 13 Sep 2021 14:07:10 -0700 (PDT)
Received: (qmail 81144 invoked from network); 13 Sep 2021 21:07:08 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com; h=date:message-id:from:to:subject:in-reply-to:references:mime-version:content-type; s=13cf1.613fbd7c.k2109; bh=PtMb70+pHL4fuYJSibw3q8fVPk9zHzjfQMue5WIH96g=; b=w9Z21gopvYewYSfGZK1QHjeBesrkmWn3J8OzRVT9ICp3mgCBVq2i4NC4JcSOt2iL0x99afm5xSzREQeWrBRNomrooG7vSny1pc4iUUi0WpF+PnlQ1JeNKvRMIr8sN3S6HeeBWk+n1gz0W1YPORoP/PDscgpQEvsTpK6Hc25XKqDF7u25s2ahrvOoEKtEok0ujjsTA31SDuNElA7l5+GAYzEtH+zbDtS45Aa0yCkLpJDMWuALPJ0wqWfgfsgQMfD9BM3RA6b1vXVKiZtj57UZJe1x93mbA46pPG4fXQPTQ2f3KAy37BBgz/LblqfBWOpzyFKpN9Z3+64CRI5dqM+NXg==
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=taugh.com; h=date:message-id:from:to:subject:in-reply-to:references:mime-version:content-type; s=13cf1.613fbd7c.k2109; bh=PtMb70+pHL4fuYJSibw3q8fVPk9zHzjfQMue5WIH96g=; b=o7e1cCOCHoF+nvKEGSx5Lm21OelVhd7qw1CHT6i8istjTZ/nBFIDwFIJKomqokrP0VrV9EtIembtWLhiFyLN7f1qm3De9hKl1Q2rtDrCa2AEVQlI0SM1P2sEh6W2SuDPpFxUIDxzqoLHXcVyhC9MyLDlE8GYaBNsONtZrFcu7oXyojHe5Ff+ki44TuWk+THZRuD/a3zfBeqNezEGKcDraK1/IeJ/6FdfGR+FQt9voKWhMIYmv3oABJXVZ0bxojebNvQrxaafSDfrykrHzG9NvbQtKWRVlIJpex5BidLawFR5izcHf5LHgR38fKEohBwquuFMiA9hx7bm+FXBN7GkwA==
Received: from ary.qy ([IPv6:2001:470:1f07:1126::78:696d:6170]) by imap.iecc.com ([IPv6:2001:470:1f07:1126::78:696d:6170]) with ESMTPS (TLS1.2 ECDHE-RSA AES-256-GCM AEAD) via TCP6; 13 Sep 2021 21:07:07 -0000
Received: by ary.qy (Postfix, from userid 501) id 31BB727D82DB; Mon, 13 Sep 2021 17:07:03 -0400 (EDT)
Received: from localhost (localhost [127.0.0.1]) by ary.qy (Postfix) with ESMTP id AB57E27D82BD; Mon, 13 Sep 2021 17:07:03 -0400 (EDT)
Date: Mon, 13 Sep 2021 17:07:03 -0400
Message-ID: <68272e8a-26fb-8cc4-4acb-1f3bf663d9dd@taugh.com>
From: John R Levine <johnl@taugh.com>
To: Marc Bradshaw <marc@marcbradshaw.net>, arc@ietf.org
X-X-Sender: johnl@ary.qy
In-Reply-To: <370ffe5c-ce58-487b-9790-460500ec94f6@beta.fastmail.com>
References: <20210913193220.9938527CD4BF@ary.qy> <370ffe5c-ce58-487b-9790-460500ec94f6@beta.fastmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"; format="flowed"
Archived-At: <https://mailarchive.ietf.org/arch/msg/arc/NhGzARJsoYijvj3e-HIfIEYj9T0>
Subject: Re: [arc] ARC path header
X-BeenThere: arc@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Authenticated Received Chain \(ARC\) protocol" <arc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/arc>, <mailto:arc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/arc/>
List-Post: <mailto:arc@ietf.org>
List-Help: <mailto:arc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/arc>, <mailto:arc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 13 Sep 2021 21:07:17 -0000

>> Not really. If you know that foo.com runs mailing lists that your
>> users subscribe to, the chances that it will suddenly turn evil are pretty low.
>
> If you know that, then you have some already done some work in establishing a list of trusted sealers, and we are back where we started.

Since it is easy to fake an ARC chain beyond the most recent link, it was 
always clear that ARC is only interesting on mail from sources that are 
generally credible.

There were some sporadic attempts to crowdsource a set of mailing list 
sites but as far as I know they never went anywhere.

Regards,
John Levine, johnl@taugh.com, Taughannock Networks, Trumansburg NY
Please consider the environment before reading this e-mail. https://jl.ly

v2.46.0 | Report a Bug | By Email | System Status