[dane] using DMARC to signal policy for email canonicalization, signing and encryption
"Wiley, Glen" <gwiley@verisign.com> Tue, 02 February 2016 23:58 UTC
Return-Path: <gwiley@verisign.com>
X-Original-To: dane@ietfa.amsl.com
Delivered-To: dane@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 554DE1A910B for <dane@ietfa.amsl.com>; Tue, 2 Feb 2016 15:58:03 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ThOSi9ykt1nI for <dane@ietfa.amsl.com>; Tue, 2 Feb 2016 15:58:02 -0800 (PST)
Received: from mail-qg0-x264.google.com (mail-qg0-x264.google.com [IPv6:2607:f8b0:400d:c04::264]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DB86F1A9109 for <dane@ietf.org>; Tue, 2 Feb 2016 15:58:00 -0800 (PST)
Received: by mail-qg0-x264.google.com with SMTP id t74so634204qgt.2 for <dane@ietf.org>; Tue, 02 Feb 2016 15:58:00 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=verisign-com.20150623.gappssmtp.com; s=20150623; h=from:to:subject:thread-topic:thread-index:date:message-id :accept-language:content-language:user-agent:content-type :mime-version; bh=CbJhFolmY9xCW5Kw/v4UNqvoV2eom/WgJagGsyZBNQ4=; b=ypr9vIBGfzi58p4KXWVSm93DV7Ti7KIV/Rzxd+72Wu1Y6uwa2yoW2TJRzFVUebK/mR Qk93O6a3A71AiBcQaw2Ptz5f/QQGjA+1AH8p0Xa9Jkz4yJ3oach2oF7WehvqJc4EpeYj wwjCirI8zTBZDOm4wIuO5ufcjrI3d+zTRxCntso07tJQ+BnatfUuyHk5QNJH+9IWcheN TKwlZKsUoZTIVVICQzUfLGcmnTB+2BMAXxiqb2MvUBdf5BAUb/G0JPzqS1vHcqx9vFZb 4zFptgLvbX0tsQ/rXExl3GURtRZrF6pIVCNbWKy1qTyuP8wlLhQq71o5pqRdpaHo3oYK NBLg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:subject:thread-topic:thread-index:date :message-id:accept-language:content-language:user-agent:content-type :mime-version; bh=CbJhFolmY9xCW5Kw/v4UNqvoV2eom/WgJagGsyZBNQ4=; b=esLuKq0L/BsyAlF3TYQoycvoZs2yR72isefnhDh3jRRF3KPk83IuUiVWZY4A6P9r+5 eoo8ZB11vB0AkwgfX4LJIxhSk9Y/TSJCFheCNhwHfEcNYPPMswNWyRQ1YKxYVU5gNUbE KUb0uJbIynZDXyrEl1bNnkTFzLy3MG5ecEU7TTycN+2iUGnMudxEaJj9Rw0iDponOW8T ZCQXOSRzukKb0T1RjjlgN/xdkrl0/FeekDFRghw7T8/I9QQAi3yRwDPcPlTeDkjG18wG UyfkueaLQxrE9Y00LGYHRWz456I6CUdUY4qHB5qMdO93g99iO+OwXelapnNPGIfu/h+D JnEQ==
X-Gm-Message-State: AG10YOTO8WRhyPexfN7WoGik7XHhg11kGV3FYEE12VhAn9HDiDwYb/laKeW6yWjJx+NjzC6eYpsWUXqRTF3So41WJS9+2dIy
X-Received: by 10.140.178.195 with SMTP id y186mr23124090qhy.100.1454457480095; Tue, 02 Feb 2016 15:58:00 -0800 (PST)
Received: from brn1lxmailout01.verisign.com (brn1lxmailout01.verisign.com. [72.13.63.41]) by smtp-relay.gmail.com with ESMTPS id u191sm523382qka.2.2016.02.02.15.57.59 for <dane@ietf.org> (version=TLS1 cipher=AES128-SHA bits=128/128); Tue, 02 Feb 2016 15:58:00 -0800 (PST)
X-Relaying-Domain: verisign.com
Received: from brn1wnexcas01.vcorp.ad.vrsn.com (brn1wnexcas01 [10.173.152.205]) by brn1lxmailout01.verisign.com (8.13.8/8.13.8) with ESMTP id u12NvxBT014193 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL) for <dane@ietf.org>; Tue, 2 Feb 2016 18:57:59 -0500
Received: from BRN1WNEXMBX01.vcorp.ad.vrsn.com ([::1]) by brn1wnexcas01.vcorp.ad.vrsn.com ([::1]) with mapi id 14.03.0174.001; Tue, 2 Feb 2016 18:57:57 -0500
From: "Wiley, Glen" <gwiley@verisign.com>
To: "dane@ietf.org" <dane@ietf.org>
Thread-Topic: using DMARC to signal policy for email canonicalization, signing and encryption
Thread-Index: AQHRXhWJTMInNB761k6xtmtGH06GmQ==
Date: Tue, 02 Feb 2016 23:57:57 +0000
Message-ID: <D2D6ACC0.24CAB%gwiley@verisign.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/14.4.9.150325
x-originating-ip: [10.173.152.4]
Content-Type: multipart/alternative; boundary="_000_D2D6ACC024CABgwileyverisigncom_"
MIME-Version: 1.0
Archived-At: <http://mailarchive.ietf.org/arch/msg/dane/gWhYXtSyNGh2D2uuDp99LWHzBSU>
Subject: [dane] using DMARC to signal policy for email canonicalization, signing and encryption
X-BeenThere: dane@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: DNS-based Authentication of Named Entities <dane.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dane>, <mailto:dane-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dane/>
List-Post: <mailto:dane@ietf.org>
List-Help: <mailto:dane-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dane>, <mailto:dane-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 02 Feb 2016 23:58:03 -0000
In light of all of the discussion about how the LHS of email addresses are normalized and encoded/hashed in order to be used to publish certificates and keys via DANE records like SMIMEA and OPENPGPKEY we have put together an approach that lets a zone owner signal the policy that is used for their domain by adding a few keywords to the DMARC record. The draft is at: https://datatracker.ietf.org/doc/draft-osterweil-dmarc-dane-names/ We welcome discussion about this approach. -- Glen Wiley Principal Engineer Verisign, Inc. (571) 230-7917 A5E5 E373 3C75 5B3E 2E24 6A0F DC65 2354 9946 C63A