Re: [dmarc-ietf] Response to a claim in draft-crocker-dmarc-author-00 security considerations

Dave Crocker <dhc@dcrocker.net> Tue, 21 July 2020 21:14 UTC

Return-Path: <dhc@dcrocker.net>
X-Original-To: dmarc@ietfa.amsl.com
Delivered-To: dmarc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 108963A0A94 for <dmarc@ietfa.amsl.com>; Tue, 21 Jul 2020 14:14:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, NICE_REPLY_A=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UpLGEbtGzbxY for <dmarc@ietfa.amsl.com>; Tue, 21 Jul 2020 14:14:26 -0700 (PDT)
Received: from simon.songbird.com (simon.songbird.com [72.52.113.5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2132D3A0A93 for <dmarc@ietf.org>; Tue, 21 Jul 2020 14:14:26 -0700 (PDT)
Received: from [192.168.1.67] (108-226-162-63.lightspeed.sntcca.sbcglobal.net [108.226.162.63]) (authenticated bits=0) by simon.songbird.com (8.14.4/8.14.4/Debian-4.1ubuntu1.1) with ESMTP id 06LLGsWv015350 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Tue, 21 Jul 2020 14:16:55 -0700
To: Brandon Long <blong@google.com>
Cc: IETF DMARC WG <dmarc@ietf.org>
References: <bf5b68c74a3c487ca8a07a0a27061e47@com> <87zh7ur069.fsf@orion.amorsen.dk> <3829fac4748a48d0b752403450843bd5@bayviewphysicians.com> <c9353a06-ab31-c397-449e-7d36afbf655d@wisc.edu> <c2ad22cd-8b35-733f-bc4c-839e2c4b3e98@dcrocker.net> <CAJ4XoYf23gu4m7Zru2iq9SV-hYNCx6KFg4J7oTDpLpTcXFk7Rg@mail.gmail.com> <f2cd4931-9f61-2031-00bc-af9c460c15a3@bbiw.net> <CAJ4XoYf=XhaHKZpUjwoBJnLMwq_0LajTBWjJ01qjCaP7365E=w@mail.gmail.com> <2f231818-5c25-eca3-9db6-3af0fba7d5c8@gmail.com> <CABa8R6t7Wsm88_qZ3k9w80xinNFoEtj3voY3y0ow=9+3csZofQ@mail.gmail.com>
Reply-To: dcrocker@bbiw.net
From: Dave Crocker <dhc@dcrocker.net>
Organization: Brandenburg InternetWorking
Message-ID: <b5f66b2f-aaac-a605-c04c-8e2436193b11@dcrocker.net>
Date: Tue, 21 Jul 2020 14:14:16 -0700
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0
MIME-Version: 1.0
In-Reply-To: <CABa8R6t7Wsm88_qZ3k9w80xinNFoEtj3voY3y0ow=9+3csZofQ@mail.gmail.com>
Content-Type: multipart/alternative; boundary="------------C79F454FF71CD2340EBC1971"
Content-Language: en-US
Archived-At: <https://mailarchive.ietf.org/arch/msg/dmarc/9xzkmv8MmhutM5ad1jafRCvxeuY>
Subject: Re: [dmarc-ietf] Response to a claim in draft-crocker-dmarc-author-00 security considerations
X-BeenThere: dmarc@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Domain-based Message Authentication, Reporting, and Compliance \(DMARC\)" <dmarc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dmarc>, <mailto:dmarc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dmarc/>
List-Post: <mailto:dmarc@ietf.org>
List-Help: <mailto:dmarc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dmarc>, <mailto:dmarc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 21 Jul 2020 21:14:28 -0000

On 7/21/2020 1:42 PM, Brandon Long wrote:
> I'd be curious when MLMs modifying the mail going through them became 
> a thing, I guess I assume it wasn't 45 years ago, but I know it's 
> irrelevant.


When I said 45 years, I wasn't not kidding...

The Subject line and the To: field were modified, here:

> Date: 7 JUN 1975 1432-PDT
> Sender: FARBER at USC-ISI
> Subject: MSGGROUP# 001 TCTALK
> From: FARBER at USC-ISI
> To: MessageGroup:
> Message-ID: <[USC-ISI]7-JUN-75 14:32:54-PDT.FARBER>
>
>
> There is a distributed network teleconferencing facility oriented
> to networks experimentally  avilable  called  TCTALK.  It was the
> result of a thesis of Jim  Calvin  at  BBN. It can be accessed at
> the ISIA site via  <network-help>TCTALK. questions relative to it
> can be answered by Calvin  or  Geoff at SRI-AI. I would recommend
> that you try it if you have not. Improvements are being made on a
> time available basis by Calvin.
>
> The full discription of TCTALK is available via the net and is in
> essense Calvins CASE thesis. Contact CAlvin for that.
>
> Dave

-- 
Dave Crocker
Brandenburg InternetWorking
bbiw.net