Re: [dmarc-ietf] Display address, was Mandatory Sender Authentication

[Dave Crocker <[e-mail]>]

On 6/10/2019 1:17 AM, Alessandro Vesely wrote:
> On Sat 08/Jun/2019 18:49:03 +0200 Dave Crocker wrote:
> 
>> Except that most users don't actually see that address because these days most
>> MUAs only display the display address.
> 
> 
> We often came across this realization.  Since DMARC hinges on that field, I
> think the spec should include some advice to MUA implementation.

Unfortunately there is no 'advice' to give that has any utility.

If you feel otherwise, please try to formulate it, including the basis 
for believing it useful, and then try to get community support for it.


> A trust on first use (TOFU) approach would seem to be possible. 

In practical terms, what does that mean?  Who does what, exactly?  What 
is the basis for believing anyone will actually do it?


>  On getting the
> same display name linked to a different domain part, a user would be required
> to configure the MUA's behavior for this particular name / domain.

Specifying user behavior is both outside the usual scope of IETF work 
and a task with frustratingly poor utility.


> Does this subject deserve a ticket?

Since it has nothing to do with errors or problems with the current 
spec, I don't see how to justify a ticket.

d/


-- 
Dave Crocker
Brandenburg InternetWorking
bbiw.net