Re: [dmarc-ietf] Proposed text for p=reject and indirect mail flows

Douglas Foster <dougfoster.emailstandards@gmail.com> Fri, 31 March 2023 03:22 UTC

Return-Path: <dougfoster.emailstandards@gmail.com>
X-Original-To: dmarc@ietfa.amsl.com
Delivered-To: dmarc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E6774C151520 for <dmarc@ietfa.amsl.com>; Thu, 30 Mar 2023 20:22:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.094
X-Spam-Level:
X-Spam-Status: No, score=-2.094 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cIG_zjwGtrVr for <dmarc@ietfa.amsl.com>; Thu, 30 Mar 2023 20:22:23 -0700 (PDT)
Received: from mail-lf1-x12d.google.com (mail-lf1-x12d.google.com [IPv6:2a00:1450:4864:20::12d]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9CB60C1516FF for <dmarc@ietf.org>; Thu, 30 Mar 2023 20:22:01 -0700 (PDT)
Received: by mail-lf1-x12d.google.com with SMTP id h11so20234025lfu.8 for <dmarc@ietf.org>; Thu, 30 Mar 2023 20:22:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; t=1680232920; x=1682824920; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=nSdOcvmE3pRgbam1Jq/lAUqgZwHaSyxXzVUBF9XHzss=; b=m2Q2FSYgbBeE3rGEqpo7hZsjfg1MfdOvr1GoJHsih7ud2HGec2CRa3/avkBzqedCjp RUUhSUu+f5jkB3NX6foCnHPVtAeghC1q2NNdbc1Eb/NB3KrFB+GTVo/UEVnQDlK/P+xA luPN0Ehagm7bnNfbbyUb4Z873o5LzDPgCT8R/SmUgwn2cJOagygpsiYZtulW3IOVZ65P q2JBNxEg9TAhyGduCFz8SWMINn9DmBzIXYFXHUazya2rm+7w2kyY7Hew7OCTpc0K4d1W aAkK/LBk0jAfWqw0DbRpFVB97wibOJmL+VnHBkac07y/xaO1pISp9akRgrE6iaMRo+pJ QSgA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1680232920; x=1682824920; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=nSdOcvmE3pRgbam1Jq/lAUqgZwHaSyxXzVUBF9XHzss=; b=HO/QsoyIrNZegeRYpzn4deB5Fzxw6oA4dwbUeJ0CwNhjo/YRu/vSvZFtEqvtixIUG4 wkCJLYnSjCsSLWzSWsO4bWALvKPfUqpbaiAeQLtbW43sk+YBoQUunbcNuuF4jYA+RSRz j1Hg8+VYgzGG0VfP1x2lfl2JzbRTwNv9RWquhdt1SCEHE0xKk1yIW2mJSAvFpTMo3TJb YuJV1ihqVQcPV4sxDZTm04CFCXdH9DpDH5p4K7wWT+yIA+JJ77fIzff6N9oCpECUDRxl FblQ58zlCtvloZjwzV46dMHokfh0JLZ4IRy1PHQZimbjn1ZIoSP7nVQex7qcaS4RMWTb vLsA==
X-Gm-Message-State: AAQBX9dyEMCDcFNKC638MOYzW53920LlCI0ETKUKydOkcuS2ahvyFoTN trELrUEr6GL3Z++R7CPRXvlqI8/WDEnmWDscSaSJBMPA
X-Google-Smtp-Source: AKy350boXqvadQ5fXV+Rs/YZgSEzdJwCi6XBgnXjFUX9XLaIIvEIxr969osjLT7kD+U0hGrqewZNMaMOZpFbunKAfpM=
X-Received: by 2002:ac2:5dd7:0:b0:4e8:44ee:e2d with SMTP id x23-20020ac25dd7000000b004e844ee0e2dmr7765361lfq.5.1680232919505; Thu, 30 Mar 2023 20:21:59 -0700 (PDT)
MIME-Version: 1.0
References: <CALaySJ+NBg9vzqa0_t-sBf7EKXQ3A=DTyy-Vc7M-ZK9-vfJxmw@mail.gmail.com> <6319292.vCqnBZbX7o@localhost> <CAHej_8nd1xyAgwASLJbuJHyXEAfHbjqxNH1XtJxKFyfyOneyug@mail.gmail.com> <13145172.pEV04Z3DvM@localhost> <CAHej_8msLJQ0vbZ2jzitjxrQ1wdim5bHJkiD-QrU5F0EJvQp0g@mail.gmail.com> <FCFEB95E-63F9-46C3-A5F4-FA6B02FA8EB5@episteme.net> <CAHej_8=GbmzyXaeEkyLkv6uKc0-owuMC6UspPNq9irT7nF8b7w@mail.gmail.com> <CALaySJLmRyyBLE7ZKy88XUS_hXr9M2uwc8jOCYBrBPeC+pCdCg@mail.gmail.com> <MN2PR11MB43519A6CD95E5C80AA1EC2CFF7899@MN2PR11MB4351.namprd11.prod.outlook.com> <13603D87-4FDE-4768-9712-E6DB0818C802@kitterman.com> <CAH48ZfztW4OFm+ZMV=et7+uczj49dfbYT7i0w4LgU7pswuiEnw@mail.gmail.com> <CAL0qLwayTG_M1-fSTXiaVM5TS1Vo7X+Ehov2Bov9vCak7gn=yg@mail.gmail.com> <CAH48ZfxejSxbsDpgBUcfMDhGcz0QLGZEH6yVRMC0xmEFLksw3w@mail.gmail.com> <06B6084E-A0C2-4E36-8B3A-EC2DFDD9D67B@episteme.net> <CAH48ZfzdZP0Gb+k_cBERWwgrJODL_GNER4ZOYxDfOS9iH8Twvg@mail.gmail.com> <CAL0qLwaGe3kSdqNU8ZVuapS1kKrhLABvD++B0+0+_ogNuj8=zw@mail.gmail.com>
In-Reply-To: <CAL0qLwaGe3kSdqNU8ZVuapS1kKrhLABvD++B0+0+_ogNuj8=zw@mail.gmail.com>
From: Douglas Foster <dougfoster.emailstandards@gmail.com>
Date: Thu, 30 Mar 2023 23:21:48 -0400
Message-ID: <CAH48ZfyacA4HURVqFsHvLxmGvOniDKN3Sem_XOcbxbEKF-CiZA@mail.gmail.com>
To: "Murray S. Kucherawy" <superuser@gmail.com>
Cc: IETF DMARC WG <dmarc@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000004e9d8e05f829b677"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dmarc/9sVBMTrTBARNCaX6XA8p05yEzfA>
Subject: Re: [dmarc-ietf] Proposed text for p=reject and indirect mail flows
X-BeenThere: dmarc@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Domain-based Message Authentication, Reporting, and Compliance \(DMARC\)" <dmarc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dmarc>, <mailto:dmarc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dmarc/>
List-Post: <mailto:dmarc@ietf.org>
List-Help: <mailto:dmarc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dmarc>, <mailto:dmarc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 31 Mar 2023 03:22:24 -0000

My point was to only restate that "signed" is the only truth that the DMARC
policy can assert.    The new prose needs to fix the false certainty that
the old prose created.   But until this week, the group seemed ready to
repeat the same mistake and use language which perpetuates the myth that
FAIL always means fraud.   Maybe, but not certainly.   The difference is
important.

DF


On Thu, Mar 30, 2023, 8:46 PM Murray S. Kucherawy <superuser@gmail.com>
wrote:

> On Thu, Mar 30, 2023 at 7:51 PM Douglas Foster <
> dougfoster.emailstandards@gmail.com> wrote:
>
>> I would be happy with p=signed, because that is what p=reject means, and
>> it is our job is to ensure that people interpret the signal correctly.
>>
>
> Quoting the charter:
>
> "The working group will seek to preserve interoperability with the
> installed base of DMARC systems, and provide detailed justification for any
> non-interoperability."
>
> Changing one of the valid "p=" values seems to me to be the opposite of
> "preserve interoperability with the installed base", so the bar is high to
> make this change.
>
> Can the problem you're trying to address be handled in any other way?
> Say, improved informational prose?
>
> -MSK, participating
>
> _______________________________________________
> dmarc mailing list
> dmarc@ietf.org
> https://www.ietf.org/mailman/listinfo/dmarc
>