Re: [dbound] DBOUND - updated use cases?

John R Levine <johnl@taugh.com> Sat, 01 October 2022 18:55 UTC

Return-Path: <johnl@taugh.com>
X-Original-To: dbound@ietfa.amsl.com
Delivered-To: dbound@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6A4CEC152583 for <dbound@ietfa.amsl.com>; Sat, 1 Oct 2022 11:55:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.408
X-Spam-Level:
X-Spam-Status: No, score=-4.408 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=iecc.com header.b=hljcNuk2; dkim=pass (2048-bit key) header.d=taugh.com header.b=FPIB3X2m
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NrZJGtyun9yp for <dbound@ietfa.amsl.com>; Sat, 1 Oct 2022 11:54:55 -0700 (PDT)
Received: from gal.iecc.com (gal.iecc.com [IPv6:2001:470:1f07:1126:0:43:6f73:7461]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B661EC152573 for <dbound@ietf.org>; Sat, 1 Oct 2022 11:54:55 -0700 (PDT)
Received: (qmail 20977 invoked from network); 1 Oct 2022 18:54:53 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com; h=date:message-id:from:to:cc:subject:in-reply-to:references:mime-version:content-type; s=51ef.63388cfd.k2210; bh=74dL2JAlaOQJfxWO+I1OnqucmQZ3Bhpw1/QLoFU2odI=; b=hljcNuk2nBeNbBtrwIYN7js16lzYl0uzoR/MLHLiOtp97va3q98NXMvnD/Bh/AheB+pyu4m7V+VM68EkUYEv3WXyWQaJSKH9D3cEhhJJZh6r33qK1tkzAtgLc+m9RROGjzgw6PcUSKfo3AmkBgpJZrdCBSYV1poizhfdQHnfHrisF04ZrdhsgpujTG5pcqA6X3v7wUvfEGjzlqzi4uDuwdtyXgldApNGjI+8ELGGmKiAIGOPhe4LEMEeJTDY0sIioifL6k3PA/bTiJbNw3FWL7L2SeUSLwrtjLI1YmHjLZnIMHEWUYPR7DglK5thCyOA6KQTzxPvfM4lBmka+CMiCw==
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=taugh.com; h=date:message-id:from:to:cc:subject:in-reply-to:references:mime-version:content-type; s=51ef.63388cfd.k2210; bh=74dL2JAlaOQJfxWO+I1OnqucmQZ3Bhpw1/QLoFU2odI=; b=FPIB3X2mko4SEO7GDotgDMI/tYt8qATNTTGUFSFYxHbTlAEniosRHndRe1Ab8YOkXhXqOsSV90R9s26VsD2tr+q060NmQtusYIPXar/ICsFIyY97fsBJfO9xPRaSF3uHaMw8Qbreji/fHCeAUBgxl4TSaRMZbFchMaJ+WOVsGikeZES9hACMxYhA4KH2zlmmdZCRbukfiH2IJGghXdSEoRvTSOlY/eY2kG1YVIgH35l6rFhGDnLzJzfmOFQGJRItMtN+xFAIFELDj1f5P/uuJ2i4Dg+PepfC0Rqc75aj1DQgNbe81RfqMsHOL4FmiaB8XdcJM5fsPHNOCjQfQB6u6A==
Received: from ary.qy ([IPv6:2001:470:1f07:1126::78:696d:6170]) by imap.iecc.com ([IPv6:2001:470:1f07:1126::78:696d:6170]) with ESMTPS (TLS1.3 ECDHE-RSA AES-256-GCM AEAD) via TCP6; 01 Oct 2022 18:54:52 -0000
Received: by ary.qy (Postfix, from userid 501) id 5CBA04BCD9FA; Sat, 1 Oct 2022 14:54:51 -0400 (EDT)
Received: from localhost (localhost [127.0.0.1]) by ary.qy (Postfix) with ESMTP id B84994BCD9DC; Sat, 1 Oct 2022 14:54:51 -0400 (EDT)
Date: Sat, 01 Oct 2022 14:54:51 -0400
Message-ID: <7bfec9e8-f673-1018-0514-7f04adbcce78@taugh.com>
From: John R Levine <johnl@taugh.com>
To: Jothan Frakes <jothan@jothan.com>
Cc: dbound@ietf.org
X-X-Sender: johnl@ary.qy
In-Reply-To: <CAGrS0FKnB=9-XFidf3=+kc+c_Hiqhqx4sgf2OfQ0x9Ge=Hu+9Q@mail.gmail.com>
References: <bd3a32cb-dd41-b195-e46d-419611000ceb@amazon.com> <99bc93ec-9be6-7abb-90c0-01f0d59c4aeb@amazon.com> <20220929145635.ojb4gplm4bqbqdcu@crankycanuck.ca> <th5lgm$2i9$1@gal.iecc.com> <CAGrS0FKnB=9-XFidf3=+kc+c_Hiqhqx4sgf2OfQ0x9Ge=Hu+9Q@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"; format="flowed"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dbound/cHXTt1XoyrfxeklXp0KzGIAzWr8>
Subject: Re: [dbound] DBOUND - updated use cases?
X-BeenThere: dbound@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: DNS tree bounds <dbound.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dbound>, <mailto:dbound-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dbound/>
List-Post: <mailto:dbound@ietf.org>
List-Help: <mailto:dbound-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dbound>, <mailto:dbound-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 01 Oct 2022 18:55:00 -0000

>> Sort of ironically with all of the stuff about DMARC using the PSL, we
>> are mostly done updating the DMARC spec and the largest change is that
>> it doesn't use the PSL any more.

> Sounds like a potentially good evolution.
> My response here hopefully won't be taken as me guarding PSL turf.
>
> Curious to walk through this with you.  Assuming this proceeds, I would
> anticipate there would be a gradual upgrade that happens.

Perhaps we could chat a week from now.

> What is the anticipated transition span of legacy/I-D version, and how
> would conflicting configurations between them behave?

I hope we can publish the new RFCs by the end of the year.  There are only 
a handful of DMARC implementations that matter, three open source 
libraries and whatever the big gorillas do, so I expect that new code will 
start to be phased in during 2023 with the usual infinitely long tail.

We designed it so that in most cases, there is no need to add the tags to 
your DMARC records and existing ones will continue to work correctly.  I 
took a look at every entry in the PSL that publishes a DMARC record and 
found only a handful where the new tags are important, all run by people 
we know who will presumably update them.

> At what point can I update the PSL Wiki to reflect that DMARC no longer
> needs entries?

We'll let you know.  Depends when people upgrade their software.

> Can you share URL so I don't have to hunt?

The drafts are in github at https://github.com/ietf-wg-dmarc

The main one is draft-ietf-dmarc-dmarcbis.  We've split out the reporting 
parts which don't have any interesting changes.

Or there are fairly up to date snapshots in the datatracker

https://datatracker.ietf.org/doc/draft-ietf-dmarc-dmarcbis/

Regards,
John Levine, johnl@taugh.com, Taughannock Networks, Trumansburg NY
Please consider the environment before reading this e-mail. https://jl.ly