Re: [Bimi] MUA Evaluation of BIMI

John Levine <johnl@taugh.com> Mon, 14 March 2022 16:43 UTC

Return-Path: <johnl@iecc.com>
X-Original-To: bimi@ietfa.amsl.com
Delivered-To: bimi@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8DD233A0BD3 for <bimi@ietfa.amsl.com>; Mon, 14 Mar 2022 09:43:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.862
X-Spam-Level:
X-Spam-Status: No, score=-1.862 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.248, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=iecc.com header.b=CXs6Hiem; dkim=pass (2048-bit key) header.d=taugh.com header.b=Dl9jlT4g
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ce7e5VN7dyMe for <bimi@ietfa.amsl.com>; Mon, 14 Mar 2022 09:42:56 -0700 (PDT)
Received: from gal.iecc.com (gal.iecc.com [IPv6:2001:470:1f07:1126:0:43:6f73:7461]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6619F3A0B7B for <bimi@ietf.org>; Mon, 14 Mar 2022 09:42:56 -0700 (PDT)
Received: (qmail 26878 invoked from network); 14 Mar 2022 16:42:54 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:cleverness; s=68fa.622f708e.k2203; bh=GPddu4dOQu+5vFwGIRRKPbDrjupMNsuzZhiA0YGAZhU=; b=CXs6Hiemn34MCM9CWD8p8SAslX0r4ChR/IXuqkUDtdy9KHWgibssXRzZ3kmdhIfR/V8MTtII3FTHWb4CVRt6mZA4wRt9A3lj9IOPzIF567UeYXFUMlI6XrWzZNwZHTT8r3egO0/Kz3saz2Wndo5aXfyFmeeNMWR7nnQE4ZSnFwh0QaHEtS7bFrbOhmu1V4eXij8jUizY6UOUHQckDXkEB7Rw+LdVog3ho8/l4NWvyjDaLb6t2susPIdNNIU2mouvNJtLhw18Jku9tHXVd4WpN4XZj08weAH9S9x89KoRN9sjZ8QmdSI33fAvyE1DDP58iv+cpLnALns8ZynTy3CUMQ==
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=taugh.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:cleverness; s=68fa.622f708e.k2203; bh=GPddu4dOQu+5vFwGIRRKPbDrjupMNsuzZhiA0YGAZhU=; b=Dl9jlT4gHW9wWc3Q18oz9T+rw5FdPnxbRMNKXDoHORPehF1CiaGGrBTiago+bQKqytJD+adf/sESSLc9WnyxU9xJb3ZUfnDsk8u+uECTkDcfEx+/tA+b/AMI5/GAU0pBk//ey/KUwLP/tOABD8otc9wvNiQsXHkscwNtH2F4d//d6IW8Qyh6SThW4jlCYlVGt8x4GPTb4Isym3vx6V4RYg1v4e4TurNseOTQgry1Wz3IhZn293zl21jp0AnXbohgiGPPNkMug2jPay+oVWNCjGDKg3gHUohFvnGip/IOkcbbaRQgb2s3b8zqIqOWHDXfWnn07/kqrQIGALHU330osQ==
Received: from ary.qy ([IPv6:2001:470:1f07:1126::78:696d:6170]) by imap.iecc.com ([IPv6:2001:470:1f07:1126::78:696d:6170]) with ESMTPS (TLS1.2 ECDHE-RSA AES-256-GCM AEAD) via TCP6; 14 Mar 2022 16:42:54 -0000
Received: by ary.qy (Postfix, from userid 501) id 38DD738FE70B; Mon, 14 Mar 2022 12:42:52 -0400 (EDT)
Date: Mon, 14 Mar 2022 12:42:52 -0400
Message-Id: <20220314164253.38DD738FE70B@ary.qy>
From: John Levine <johnl@taugh.com>
To: bimi@ietf.org
Cc: dcrocker@bbiw.net
In-Reply-To: <82f4775e-faab-b081-9502-523bd056e9e3@dcrocker.net>
Organization: Taughannock Networks
X-Headerized: yes
Cleverness: minimal
Mime-Version: 1.0
Content-type: text/plain; charset="utf-8"
Content-transfer-encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/bimi/VI-4NU9ozgnaO9bVTCGAAMHNzrM>
Subject: Re: [Bimi] MUA Evaluation of BIMI
X-BeenThere: bimi@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Brand Indicators for Message Identification <bimi.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/bimi>, <mailto:bimi-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/bimi/>
List-Post: <mailto:bimi@ietf.org>
List-Help: <mailto:bimi-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/bimi>, <mailto:bimi-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Mar 2022 16:43:03 -0000

It appears that Dave Crocker  <dcrocker@bbiw.net> said:
>In other words, as an end-to-end service, BIMI really should NOT simply 
>defer the question of MTA/MDA/MUA interaction as trust as something left 
>to "the user of the MUA to determine".

Since BIMI is about marketing, if people want to show logos, what the heck, why not.

If the question is that they might show logos by mistake on malicious mail, why is that
mail even in the inbox?  The MUA is way too late for that kind of defense.

R's,
John