Re: [dmarc-ietf] ARC spec clean up if 7601bis proceeds

"Kurt Andersen (b)" <kboth@drkurt.com> Tue, 02 January 2018 17:13 UTC

Return-Path: <kurta@drkurt.com>
X-Original-To: dmarc@ietfa.amsl.com
Delivered-To: dmarc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BAAF4124E15 for <dmarc@ietfa.amsl.com>; Tue, 2 Jan 2018 09:13:02 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level:
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=drkurt.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z8uACOzbEO6J for <dmarc@ietfa.amsl.com>; Tue, 2 Jan 2018 09:13:00 -0800 (PST)
Received: from mail-lf0-x235.google.com (mail-lf0-x235.google.com [IPv6:2a00:1450:4010:c07::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2A8F8124207 for <dmarc@ietf.org>; Tue, 2 Jan 2018 09:13:00 -0800 (PST)
Received: by mail-lf0-x235.google.com with SMTP id g63so34271086lfl.11 for <dmarc@ietf.org>; Tue, 02 Jan 2018 09:13:00 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=drkurt.com; s=20130612; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=+SwMEBv/mpR+IgL82EXBec6Hn0O2MpN0WQO/yRG7Qr8=; b=Q30BuyerWEPF3xWwuZ1kRdFFCr/16OrncQUTdkXedc413yaxv9zELPMIxhGxBUwhcx aSsulQ4HQgZPL9CT/JP4hf0RjLqLKOTys5aYBM1FVimZEMISMnfkhn+qDwSF69QMULwX KBzOdyqlmSgiDvVp20MQjRMAaumx7C28rXNkY=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=+SwMEBv/mpR+IgL82EXBec6Hn0O2MpN0WQO/yRG7Qr8=; b=HhDYYnmw0kfRLWnnYg8KUS0oRR+REU7hEn69oxVmkv4lH5JnQX2+LrR+QmN4yzg3WV Bl7sM5xLyrjtxBDq35QBlr+AxKClIoSnDUbFjP28Ra24s/piM7SVX1+y9iQS3QywSgNH KmQPrB8oPOwlfn3defQvbkngSmz6U/uzi4fz5OQZuHcw9xfPdfXQS7aa04oDYj1Xgp4N rQbiD+69Axcc1rpEz3JlguglpOmoNRTnkdsgfrHAF55yT3WMs+XN7i1F3c4G4Zz6UoVB ZM3MosiAyQ8AXBMoJYuKo29MeELqBxo8YquqDmwkZvU2owgdCdG0n4N1jvtxOpzGzMb8 eQvg==
X-Gm-Message-State: AKGB3mLkKb+PF/YkHSR5cjhyCMCUMu7SywcZKIvBQoxk3qApiMQtSKWL d96JK3gCqe9t+k0Uh34mC/7WI7ofxjBoh7c0sdPpD1b0
X-Google-Smtp-Source: ACJfBouwAFMF5SKZDREbXA4K91KDbvlVLXlySz1gjwRtxvH4gp0mLQV/urgFgPgS3O6luRpXRXMVmYC2x6VqZXWESn8=
X-Received: by 10.46.22.15 with SMTP id w15mr6125387ljd.17.1514913178223; Tue, 02 Jan 2018 09:12:58 -0800 (PST)
MIME-Version: 1.0
Sender: kurta@drkurt.com
Received: by 10.25.56.11 with HTTP; Tue, 2 Jan 2018 09:12:57 -0800 (PST)
In-Reply-To: <CAD2i3WOgWJg+aGkarDg2iwCCKBbk0Uj6nENFBS_Rk++qqeR7pw@mail.gmail.com>
References: <CAD2i3WOgWJg+aGkarDg2iwCCKBbk0Uj6nENFBS_Rk++qqeR7pw@mail.gmail.com>
From: "Kurt Andersen (b)" <kboth@drkurt.com>
Date: Tue, 02 Jan 2018 17:12:57 +0000
X-Google-Sender-Auth: 68kUAgVbXH_xgtL0Ors1PZsLhnk
Message-ID: <CABuGu1quMrCL+DsZG53mrfSHz7J0x=ZBXTh4dnwyT+VscCbbOA@mail.gmail.com>
To: Seth Blank <seth@sethblank.com>
Cc: "dmarc@ietf.org" <dmarc@ietf.org>
Content-Type: multipart/alternative; boundary="f403045fc1b8da9d780561ce357f"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dmarc/H75DFkUB5jMk5RMghOhUORwKzpA>
Subject: Re: [dmarc-ietf] ARC spec clean up if 7601bis proceeds
X-BeenThere: dmarc@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Domain-based Message Authentication, Reporting, and Compliance \(DMARC\)" <dmarc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dmarc>, <mailto:dmarc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dmarc/>
List-Post: <mailto:dmarc@ietf.org>
List-Help: <mailto:dmarc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dmarc>, <mailto:dmarc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 02 Jan 2018 17:13:03 -0000

On Fri, Dec 29, 2017 at 12:58 AM, Seth Blank <seth@sethblank.com> wrote:

> If 7601bis proceeds to allow content for filters in addition to humans,
> then I believe the actions in the ARC draft (https://tools.ietf.org/html/
> draft-ietf-dmarc-arc-protocol-10) are as follows:
>
> Section 5.2 is cleaned up to inherit AAR ABNF from 7601bis.
>

Yes


> Section 5.2.1 is stricken.
>

No - the instance variable is still germane. We may choose to move it
elsewhere, but the info needs to stay.


> New IANA registrations (I'm pretty certain this is wrong!):
> authentication-results methods: dkim header.s
>

header.s is already defined in RFC6376 section 7.2 so I don't think that it
needs further citation.


> authentication-results methods: arc smtp.client-id
>

Should be smtp.client-ip no "id".


> authentication-results methods: arc chain.closest-fail
>

See separate thread (Clarifying the value of arc.closest-fail) that I'm
about to spin up.


> authentication-results results: arc pass|fail|none|policy
>

Reading this, and initially conflating it with the cv values, I think that
we should work on clarifying the wording to distinguish between the purely
mechanical "did you check the ARC chain and, if so, is it valid?" vs the
what did you do as a result of said information. Currently, this
information is not called for in the A-R or AAR, just in the modified DMARC
report to senders. Would we want to add it to the A-R/AAR as arc.effect? We
could then have arc.cv for the mechanical result and arc.effect
(none|pass|fail|other) for the policy-mediated impact on processing the
message.


> After this, I believe most of section 9 (except 9.3) can be stricken or
> greatly reduced into verifier actions.
>

We can see. It may take a bit more work on the verifier section or better
clarity/organization.

--Kurt