IETF Logo Mail Archive

Re: [dmarc-ietf] DMARC forensic reports (ruf=) and privacy

Дилян Палаузов <dilyan.palauzov@aegee.org> Tue, 05 February 2019 08:06 UTC

Return-Path: <dilyan.palauzov@aegee.org>
X-Original-To: dmarc@ietfa.amsl.com
Delivered-To: dmarc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D9B1D130E13 for <dmarc@ietfa.amsl.com>; Tue, 5 Feb 2019 00:06:55 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (4096-bit key) header.d=aegee.org
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ibnH73ImuWqV for <dmarc@ietfa.amsl.com>; Tue, 5 Feb 2019 00:06:53 -0800 (PST)
Received: from mail.aegee.org (mail.aegee.org [144.76.142.78]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A9982129C6A for <dmarc@ietf.org>; Tue, 5 Feb 2019 00:06:52 -0800 (PST)
Authentication-Results: mail.aegee.org/x1586kvn027018; auth=pass (PLAIN) smtp.auth=didopalauzov
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=aegee.org; s=k4096; t=1549354007; i=dkim+MSA-tls@aegee.org; r=y; bh=s38JXSeG+bYbx5vh7XB6qltB/+nysnnJkZZr2bPgDK8=; h=Subject:From:To:Date:In-Reply-To:References; b=Cri5QXge6do8p1FxIZUXoDuE591UsyJ5jN35cU75WRpX/CKnUPu61IM4gUiQOHAMQ 28xAdmsFyBAgNHHTKHOw0CtIEbxd32u1JFvuvTRxhaE4VHK3PrnbMd8PtTUXpF/0qv rWZSTZjlOT1hXWMgXPczAkXYTmixehrDldc/3OXObETx9A+nTT/Fo34gPMxcsAdsAq s/jcuJd0yjXh0plJMiuzQwGPLJjll4QcLwQOoMI8akUn5d31h9a459d0iCetcv/1h+ Jv3Lvt2EnQG4/7nBO9CMMGhp4apOGMs7uuhbYqNz7Lj6Gw+C7hQRi4JdcixEJenV+p 9iUv0GEUm9eNlxRkzaa2jCMA5amAWEuOtPVo2E1bnzE4yH14fg2jNCHpf+txQSjYLz OEmtEbShjTRXAxXownSWS4lLMfcBpWRZ2D4ABM+PQEEls1Xgtl46tCIcRK+f+PHVQl fMOCxLDEwl/5+GWRJONwJe1jMBMUjCungqHY8evXPPnR9ITEAEK936ePng6WJHbEdF F7T2Vm22xgApvEyD+lOdvidsb63VG2cxsIHo1bF1i9xd1MZ0foW91Nj8rFluQFBHVP CF2VkiUG9Klf4L2u+RW7m7spJpRr2V9o0p0vtueDOtGR1xsdDN16uDlOQ0RccG0qZv jGP/TtzbZMAQAda1MNy2KyOs=
Authentication-Results: mail.aegee.org/x1586kvn027018; dkim=none
Received: from Tylan (x2f36bf1.dyn.telefonica.de [2.243.107.241]) (authenticated bits=0) by mail.aegee.org (8.15.2/8.15.2) with ESMTPSA id x1586kvn027018 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Tue, 5 Feb 2019 08:06:47 GMT
Message-ID: <974c2d00017358cdf3b78037e4276234db2cfdee.camel@aegee.org>
From: Дилян Палаузов <dilyan.palauzov@aegee.org>
To: John Levine <johnl@taugh.com>, dmarc@ietf.org
Date: Tue, 05 Feb 2019 08:06:46 +0000
In-Reply-To: <20190126163123.AAA4B200D39816@ary.qy>
References: <20190126163123.AAA4B200D39816@ary.qy>
Content-Type: text/plain; charset="UTF-8"
User-Agent: Evolution 3.31.91
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Virus-Scanned: clamav-milter 0.101.1 at mail.aegee.org
X-Virus-Status: Clean
Archived-At: <https://mailarchive.ietf.org/arch/msg/dmarc/FuDGe0Mz1wCVPnT2waLepR5Q2WY>
Subject: Re: [dmarc-ietf] DMARC forensic reports (ruf=) and privacy
X-BeenThere: dmarc@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Domain-based Message Authentication, Reporting, and Compliance \(DMARC\)" <dmarc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dmarc>, <mailto:dmarc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dmarc/>
List-Post: <mailto:dmarc@ietf.org>
List-Help: <mailto:dmarc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dmarc>, <mailto:dmarc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Feb 2019 08:06:56 -0000

Hello John,

On Sat, 2019-01-26 at 11:31 -0500, John Levine wrote:
> …  The failure reports are almost
> entirely useless.  Of the ones I get, the majority are random Chinese
> spam that happened to forge one of my domains on the From line, the
> rest are from mailing lists where I wouldn't expect DMARC to pass.

You have published DNS TXT _dmarc.taugh.com “v=DMARC1; p=none; rf=afrf; rua=
mailto:dmarc-a@abuse.net; ruf=mailto:dmarc-f@abuse.net”.

How do you define a useful report and for which purpose do you want to receive reports?  I mean, when does sending
reports to p=none make sense.

Regards
  Дилян

v2.23.0 | Report a Bug | By Email