Re: [dmarc-ietf] Are Evaluators motivated to switch to Tree Walk?

Alessandro Vesely <vesely@tana.it> Mon, 20 June 2022 07:13 UTC

Return-Path: <vesely@tana.it>
X-Original-To: dmarc@ietfa.amsl.com
Delivered-To: dmarc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D0FDC159487 for <dmarc@ietfa.amsl.com>; Mon, 20 Jun 2022 00:13:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.005
X-Spam-Level:
X-Spam-Status: No, score=-4.005 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, NICE_REPLY_A=-1.876, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (unsupported algorithm ed25519-sha256)" header.d=tana.it header.b=Y5yxozxn; dkim=pass (1152-bit key) header.d=tana.it header.b=BhPU/0cf
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Fyod0aw3pHy5 for <dmarc@ietfa.amsl.com>; Mon, 20 Jun 2022 00:13:30 -0700 (PDT)
Received: from wmail.tana.it (wmail.tana.it [62.94.243.226]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0423AC14CF04 for <dmarc@ietf.org>; Mon, 20 Jun 2022 00:13:28 -0700 (PDT)
DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=tana.it; s=epsilon; t=1655709204; bh=H1wwx4oqDyGQd5TET3fg/Mdu7RNls3N+Z3k1V1WZ6Wc=; h=Date:Subject:To:Cc:References:From:In-Reply-To; b=Y5yxozxnx9iso4cwyTsFh3gOxcD8OcFHSNyRSiRUY+lCkyHH9aOQhEkqbW7P0U54H xnl3/uN/njpA7GMn6p5Bw==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tana.it; s=delta; t=1655709204; bh=H1wwx4oqDyGQd5TET3fg/Mdu7RNls3N+Z3k1V1WZ6Wc=; h=Date:To:Cc:References:From:In-Reply-To; b=BhPU/0cfwzAMIz9e1uchcovRAaxjkmaXi9iRO9rkcdpFW3zH4eSA45sHvaS0pPVwi amsNV0EvFsvWg4Ae4IGtY12wuuZugo++wKztEheHDw/fO2jpMuZ+2QmTY91h6R5jmR TkFIdNSKmyB+bC1POtx5ZfMzHiY1OgNbmlhX5TlfCsm+mtVMktR/cEQDvg0bu
Author: Alessandro Vesely <vesely@tana.it>
Original-Cc: IETF DMARC WG <dmarc@ietf.org>
Received: from [172.25.197.111] (pcale.tana [172.25.197.111]) (AUTH: CRAM-MD5 uXDGrn@SYT0/k, TLS: TLS1.3, 128bits, ECDHE_RSA_AES_128_GCM_SHA256) by wmail.tana.it with ESMTPSA id 00000000005DC0CE.0000000062B01E14.0000431B; Mon, 20 Jun 2022 09:13:24 +0200
Message-ID: <eb41921d-2631-c46e-8f27-fd6b38ec20d9@tana.it>
Date: Mon, 20 Jun 2022 09:13:23 +0200
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.9.0
Content-Language: en-US
To: John R Levine <johnl@taugh.com>, "Murray S. Kucherawy" <superuser@gmail.com>
Cc: IETF DMARC WG <dmarc@ietf.org>
References: <CAL0qLwa0fGJRGXaueKERwM_bfSBjwB4dG8=-iTTWQ6trPohuxQ@mail.gmail.com> <20220618181008.3D0E243C75B5@ary.qy> <CAL0qLwZ_8MsD-t3-25yzYDJsd3vVKHocZb+nwhrqKNpO7KutLA@mail.gmail.com> <8521df13-652d-c30f-3fac-75630c3fedbd@taugh.com>
Authentication-Results: tana.it; auth=pass (details omitted)
From: Alessandro Vesely <vesely@tana.it>
In-Reply-To: <8521df13-652d-c30f-3fac-75630c3fedbd@taugh.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/dmarc/7-MDei8v2-OcJPxai-GuwOzoNOQ>
Subject: Re: [dmarc-ietf] Are Evaluators motivated to switch to Tree Walk?
X-BeenThere: dmarc@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Domain-based Message Authentication, Reporting, and Compliance \(DMARC\)" <dmarc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dmarc>, <mailto:dmarc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dmarc/>
List-Post: <mailto:dmarc@ietf.org>
List-Help: <mailto:dmarc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dmarc>, <mailto:dmarc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 20 Jun 2022 07:13:34 -0000

On Sun 19/Jun/2022 18:08:57 +0200 John R Levine wrote:
>>> That seems like a pessimal way to make things interoperate: use one of
>>> an unknown set of algorithms ...
>> 
>> Given that we're already working in an environment where it's unlikely that
>> everyone's working from a common version of the PSL, I don't think this is
>> such a scary idea.
> 
> But one of the points of the tree walk is that for the first time it gives us a 
> well-defined algorithm that everyone can use to get the same answer.


Getting the right answer is essential, of course.  However, DMARC doesn't 
provide for interoperation among different evaluators.  That everyone gets 
exactly the same answer is not so crucial.


> I realize that the PSL works OK, mostly, we think, give or take its daily 
> updates and no agreement about whether you use the whole thing or just the 
> nominally more official first part.


The tree walk is going to be better than the PSL when all the critical nodes 
will have been flagged adequately.  Currently, there are uncertain areas using 
either algorithm.


> I don't see why we would want to make things worse.


A simple reason is backward compatibility.  But, from an editorial POV, 
specifying both brings an occasion to highlight their differences and analyze 
why one is better than the other under what respects.


Best
Ale
--