Re: [dmarc-ietf] Errors in RFC 8601, was Question about changes introduced by erratum

John Levine <johnl@taugh.com> Sun, 22 March 2020 15:44 UTC

Return-Path: <johnl@iecc.com>
X-Original-To: dmarc@ietfa.amsl.com
Delivered-To: dmarc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5A6193A0890 for <dmarc@ietfa.amsl.com>; Sun, 22 Mar 2020 08:44:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.851
X-Spam-Level:
X-Spam-Status: No, score=-1.851 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.249, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1536-bit key) header.d=iecc.com header.b=L3vkydPx; dkim=pass (1536-bit key) header.d=taugh.com header.b=VJVIvZU6
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bn_Dm4Y43eRj for <dmarc@ietfa.amsl.com>; Sun, 22 Mar 2020 08:44:39 -0700 (PDT)
Received: from gal.iecc.com (gal.iecc.com [IPv6:2001:470:1f07:1126:0:43:6f73:7461]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B180B3A088D for <dmarc@ietf.org>; Sun, 22 Mar 2020 08:44:39 -0700 (PDT)
Received: (qmail 68400 invoked from network); 22 Mar 2020 15:44:38 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding;s=10b2e.5e7787e6.k2003; bh=eH4hCFv2ZrM42csNYLO+E2otG7qcQFPkVL9M67kSXRg=; b=L3vkydPx3zRnNYJKGeKl2fnDERjclAOQvJuG5U8OEuHtU/lboZl/TkM858FKXzefuXTbxegvtVGk0UJjWeofIiQqGpbvmY3J5/cE8FKHSFxxrtVJQEpKt86+vUurW8ULC955aoCnjzE1cWicLN9uPlkcfJT/f2u2lcR4Vsx53bfmK6UZLHrfvinhZ8uF7zRPLbS1TQoBFsnh7CojZ1rPXoirODqeEvlqrpanor8EMBoOX+KghLSggaz9/yZjSBV/
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=taugh.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding;s=10b2e.5e7787e6.k2003; bh=eH4hCFv2ZrM42csNYLO+E2otG7qcQFPkVL9M67kSXRg=; b=VJVIvZU69bON3oWWV9HHqk8JYhv5iuT1Xp+r2CcS248DpvdL/2dgRKdgV+OOAeJgnW22MCH0Jm6VMKMiGn+icwI0fB6B7ie/Jyx4ZXquT6wrq47RbKYO6gNqe6xykaXLH1j+MvBXq9jH1Xlk8+hDEjRxaD8ERMsIHF4dMfuZ2DqrO+Km36ctK+eMV9j+v0rstz+a5luIsaHows3VeqeEuKC+wbZKebXGF+/fP7gd395TgqqF6VooOjBTuv5aLQ2u
Received: from ary.qy ([IPv6:2001:470:1f07:1126::78:696d:6170]) by imap.iecc.com ([IPv6:2001:470:1f07:1126::78:696d:6170]) with ESMTP via TCP6; 22 Mar 2020 15:44:38 -0000
Received: by ary.qy (Postfix, from userid 501) id 14E02166129A; Sun, 22 Mar 2020 11:44:37 -0400 (EDT)
Date: Sun, 22 Mar 2020 11:44:37 -0400
Message-Id: <20200322154438.14E02166129A@ary.qy>
From: John Levine <johnl@taugh.com>
To: dmarc@ietf.org
Cc: rfc@arcsin.de
In-Reply-To: <caf224ea-faed-138d-be4e-3adaad6d836d@arcsin.de>
Organization: Taughannock Networks
X-Headerized: yes
Mime-Version: 1.0
Content-type: text/plain; charset="utf-8"
Content-transfer-encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/dmarc/AIaSR-h72sXWZ4uqyqgWaCsS2oA>
Subject: Re: [dmarc-ietf] Errors in RFC 8601, was Question about changes introduced by erratum
X-BeenThere: dmarc@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Domain-based Message Authentication, Reporting, and Compliance \(DMARC\)" <dmarc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dmarc>, <mailto:dmarc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dmarc/>
List-Post: <mailto:dmarc@ietf.org>
List-Help: <mailto:dmarc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dmarc>, <mailto:dmarc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 22 Mar 2020 15:44:42 -0000

In article <caf224ea-faed-138d-be4e-3adaad6d836d@arcsin.de> you write:
>.... [SPF] on the other hand
>has an A-R example that is domain-name only, so I assumed that
>smtp.mailfrom in spf context was more loosely defined via RFC7001's
>pvalue (that is, with the optional local-part@).

I'm pretty sure the example is wrong, and was copied verbatim from
wrong examples going back to RFC5451.

RFC8601 sec 2.7.2 refers to RFC 7208 for "mailfrom".  RFC 7208 sec 1.1.3
says that the MAIL FROM, which I whink we can assume is the same thing,
is the RFC5321.MailFrom from RFC 5598.  RFC 5598 says that's a mailbox,
not a domain name.

gain, if you look at the existing implementations, they put the
address in spf smtp.mailfrom, not just the domain name.

R's,
John

PS: I have always found it frustrating that I have to chase through a
dozen documents to find the syntax of A-R.  I understand the desire
not to try to keep two copies of definitions in sync, but as we've
seen, that doesn't always lead to the result you want.