IETF Logo Mail Archive

Re: [dmarc-ietf] Response to a claim in draft-crocker-dmarc-author-00 security considerations

Dave Crocker on behalf of Kurt Andersen <johnl@taugh.com> Fri, 17 July 2020 21:00 UTC

Return-Path: <johnl@iecc.com>
X-Original-To: dmarc@ietfa.amsl.com
Delivered-To: dmarc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 938803A00C9 for <dmarc@ietfa.amsl.com>; Fri, 17 Jul 2020 14:00:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1536-bit key) header.d=iecc.com header.b=IHKCpiaI; dkim=pass (1536-bit key) header.d=taugh.com header.b=YlWeS3L6
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id v89mI9MpMO-U for <dmarc@ietfa.amsl.com>; Fri, 17 Jul 2020 14:00:56 -0700 (PDT)
Received: from gal.iecc.com (gal.iecc.com [IPv6:2001:470:1f07:1126:0:43:6f73:7461]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 28A593A00C4 for <dmarc@ietf.org>; Fri, 17 Jul 2020 14:00:55 -0700 (PDT)
Received: (qmail 92961 invoked from network); 17 Jul 2020 21:00:54 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding; s=16b13.5f121186.k2007; bh=zWGcGquWywpQ4/o9MBcCiHUYFAJ4x4GTmIvGCLN9ew8=; b=IHKCpiaImcJ+ThdeGF7MTQisJcPzQ9nRmOMuv0zptKoQjbNBm6Zk7rzOQcStT7ipeR9Oy6zz2fTuOVSTvxQx20WC4NiDvDX0H5kug7uH8l9KDq0uG7+sWRAHLrsG0O9E/yX4N7W34oH2UZfPZHuNWlOCwMRjv3eG7p5Kc6orgxhX7wV1tEZUJU1DTt+kGe7JoNp6kqMFxu5E2HjT5QFmQr1k184UW4kVH81bZ0l5MLV2djSaZdDJs/t4wNSovBpu
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=taugh.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding; s=16b13.5f121186.k2007; bh=zWGcGquWywpQ4/o9MBcCiHUYFAJ4x4GTmIvGCLN9ew8=; b=YlWeS3L63bFyRHyTGRSW1HWe8Y22NDLpoUKWDyl8Tu3NSm8SjuTvghpAVWUDnvWYNulHu/UeJPuaUJuiDJOp7FaHYUwc/nP3imFPWNOnq5Nkiaw0VnHPhVMt+Uz96BhFs0WVJU1rf/rIa4p+9tmH+WB1EJdbpFrjU+WKJHFJVDd/898tV9WbxIt+f5qQYbqvQ5ud5Td/iy9CQuNEBcmkplp59MJBe/zL9CT7nMQF/cmUOVTvRR9znWHtGyjWq3Yf
Received: from ary.qy ([IPv6:2001:470:1f07:1126::78:696d:6170]) by imap.iecc.com ([IPv6:2001:470:1f07:1126::78:696d:6170]) with ESMTP via TCP6; 17 Jul 2020 21:00:53 -0000
Received: by ary.qy (Postfix, from userid 501) id 674D61D2C431; Fri, 17 Jul 2020 17:00:53 -0400 (EDT)
Date: Fri, 17 Jul 2020 17:00:53 -0400
Message-Id: <20200717210053.674D61D2C431@ary.qy>
From: Dave Crocker on behalf of Kurt Andersen <johnl@taugh.com>
To: dmarc@ietf.org
Cc: dcrocker@gmail.com
In-Reply-To: <cd9258e6-3917-2380-dd9b-66d74f3a64d3@gmail.com>
Organization: Taughannock Networks
X-Headerized: yes
Mime-Version: 1.0
Content-type: text/plain; charset="utf-8"
Content-transfer-encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/dmarc/E92p7_czHJgrywHnXGRfe5Iz5Ec>
Subject: Re: [dmarc-ietf] Response to a claim in draft-crocker-dmarc-author-00 security considerations
X-BeenThere: dmarc@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Domain-based Message Authentication, Reporting, and Compliance \(DMARC\)" <dmarc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dmarc>, <mailto:dmarc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dmarc/>
List-Post: <mailto:dmarc@ietf.org>
List-Help: <mailto:dmarc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dmarc>, <mailto:dmarc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 17 Jul 2020 21:00:58 -0000

In article <cd9258e6-3917-2380-dd9b-66d74f3a64d3@gmail.com> you write:
>> I'd counter by personal anecdote that we have had to undertake 
>> security remediations because of messages which were forwarded by our 
>> CEO to other employees for responses which happened to contain malware 
>> and/or bad links. ...

>Except that the problem isn't the email address, especially since almost 
>no one sees those any more.  And the display name isn't protected.

Do we have any recent numbers on how many users see the From address rather
than or in addition to the display name?

Signed,
uh, someone

v2.23.0 | Report a Bug | By Email