Re: [dmarc-ietf] Reversing modifications from mailing lists

John Levine <johnl@taugh.com> Mon, 29 November 2021 03:04 UTC

Return-Path: <johnl@iecc.com>
X-Original-To: dmarc@ietfa.amsl.com
Delivered-To: dmarc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D21763A0AAD for <dmarc@ietfa.amsl.com>; Sun, 28 Nov 2021 19:04:08 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.85
X-Spam-Level:
X-Spam-Status: No, score=-1.85 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.25, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=iecc.com header.b=A+fEFE1P; dkim=pass (2048-bit key) header.d=taugh.com header.b=msyE6Qvr
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PSjTZugF3AWt for <dmarc@ietfa.amsl.com>; Sun, 28 Nov 2021 19:04:03 -0800 (PST)
Received: from gal.iecc.com (gal.iecc.com [IPv6:2001:470:1f07:1126:0:43:6f73:7461]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4D1AE3A0AAA for <dmarc@ietf.org>; Sun, 28 Nov 2021 19:04:03 -0800 (PST)
Received: (qmail 98198 invoked from network); 29 Nov 2021 03:03:59 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:cleverness; s=17f94.61a4431f.k2111; bh=b60g97y9N1+u+4/kAyDh8k05GpM2y8/bpK2Q2eTnAhI=; b=A+fEFE1Pm+N+GIL2RGPXxFrYA4onueBZr1NcysMZ1Eulp6sEKwyp4WTYl59dIXg5aHpJyefWzFA11ahxvvWAotaPNtK2yMMP/kxyQCq82ay8Qtvkr3YbEtuT+3FylHr2AJVmUxPCXpLAcnUup7APTV4Uf6D1eX97EF79oPXgFLd7ph2pHeiGp3+Yhu8KF2mSnGgH0N7YLNCgdnlInwV/WKQ0GLEjEpWFzszrNkwDRrhmZPIo73wWYFGTMnsO0QDX1wMDN4s3ZdWalzSZDfvam6LgYG0oiyUOp6QUfgdGJxPsBvCFrEx5CAtbpdCuslfdwG8it7+VN0QW+mz8KciOUQ==
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=taugh.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:cleverness; s=17f94.61a4431f.k2111; bh=b60g97y9N1+u+4/kAyDh8k05GpM2y8/bpK2Q2eTnAhI=; b=msyE6Qvr/7i6xGQCon6DN5PD8RZzJGFkUrjvUgkWEe49u8v2j4qv33pvPMYOJ/k4IX7HX6wS6NyCQqVIhrIrGGr0ukdIMQJnGxr2dhq8xeETryzzoA3jSqcau4oprYh83nZieIiYnNpQEN6Fvz5bcypfQs5H+so/j72B9/EnmZL3EoP3KbAvtecNvKxJZkofVUmHBI10n0ZyfvyL/LOkMZl4bk8VGyFolFnsdjQCZk/vqYQc8H3oL4TKB8Ar7AYtwWdph2OgA7SqkkXI7hJHNzMb08YYiyQ9KNamH+U2WrOnQZUhNpYm0XWM2y8vuCIkK+oMF8Zh8/bxtuqMbtvKNg==
Received: from ary.qy ([IPv6:2001:470:1f07:1126::78:696d:6170]) by imap.iecc.com ([IPv6:2001:470:1f07:1126::78:696d:6170]) with ESMTPS (TLS1.2 ECDHE-RSA AES-256-GCM AEAD) via TCP6; 29 Nov 2021 03:03:59 -0000
Received: by ary.qy (Postfix, from userid 501) id BC1EA30B80A5; Sun, 28 Nov 2021 22:03:57 -0500 (EST)
Date: Sun, 28 Nov 2021 22:03:57 -0500
Message-Id: <20211129030358.BC1EA30B80A5@ary.qy>
From: John Levine <johnl@taugh.com>
To: dmarc@ietf.org
Cc: ned+dmarc@mrochek.com
In-Reply-To: <01S6OJDEJX3O005PTU@mauve.mrochek.com>
Organization: Taughannock Networks
X-Headerized: yes
Cleverness: minimal
Mime-Version: 1.0
Content-type: text/plain; charset="utf-8"
Content-transfer-encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/dmarc/HduQr1OcWELNTyhkpO5gPnGZm7g>
Subject: Re: [dmarc-ietf] Reversing modifications from mailing lists
X-BeenThere: dmarc@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Domain-based Message Authentication, Reporting, and Compliance \(DMARC\)" <dmarc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dmarc>, <mailto:dmarc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dmarc/>
List-Post: <mailto:dmarc@ietf.org>
List-Help: <mailto:dmarc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dmarc>, <mailto:dmarc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 29 Nov 2021 03:04:09 -0000

It appears that  <ned+dmarc@mrochek.com> said:
>> It appears that Wei Chuang  <weihaw@google.com> said:
>> > If the RFC2045 canonical representation at the final destination can be the
>> > same as the canonical representation at the original sender, ...
>
>> When we were working on DKIM canonicalization we had lengthy discussions about
>> what to do about MIME and we decided not to even try.
>
>A mistake IMO.

This was part of the discussion about what sort of body modifications
to allow. We ended up with optionally ignoring white space changes,
and l= to ignore added text. My impression is that neither is useful.
Very few messages pass with relaxed canonicalization that don't also
pass strict. The goal of l= was to allow mailing lists to add footers,
but as we've seen in this discussion, if a list adds a footer it's
likely to make other changes too.  I think the main use case for
relaxed mode was an old bug in sendmail that added an extra \r\n
on the way through, but it's long gone.

For MIME, the question wasn't just whether two versions of messages
were equivalent, but the impossible question of what other changes
keep the message "the same" and which are too different. As you note
there are lots of ways that a message could be recoded into equivalent
MIME parts, but again it is my impression that those sorts of changes
are rare without also adding or removing body parts which gets us into
the swamp of how different is too different. So we didn't try.

R's,
John