Re: [dmarc-ietf] Separating DMARC alignment validation from DMARC policy

ned+dmarc@mrochek.com Tue, 28 July 2020 14:41 UTC

Return-Path: <ned+dmarc@mrochek.com>
X-Original-To: dmarc@ietfa.amsl.com
Delivered-To: dmarc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4C67C3A0E61 for <dmarc@ietfa.amsl.com>; Tue, 28 Jul 2020 07:41:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.1
X-Spam-Level:
X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mrochek.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aIKQezmUKy3Y for <dmarc@ietfa.amsl.com>; Tue, 28 Jul 2020 07:41:36 -0700 (PDT)
Received: from mauve.mrochek.com (mauve.mrochek.com [98.153.82.211]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5FFE03A0E21 for <dmarc@ietf.org>; Tue, 28 Jul 2020 07:41:35 -0700 (PDT)
Received: from dkim-sign.mauve.mrochek.com by mauve.mrochek.com (PMDF V6.1-1 #35243) id <01RNRIK6OUY8008T9M@mauve.mrochek.com> for dmarc@ietf.org; Tue, 28 Jul 2020 07:36:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mrochek.com; s=201712; t=1595946991; bh=dvV+62jnPyLCqJl59M3jZze3jWZKTQBqSQAAbXYOFFM=; h=From:Cc:Date:Subject:In-reply-to:References:To:From; b=JTw+fKMNFJhKb9uVBYIF1BNRUuPRVDnTXDGnxn/gLRfmXzPspPN1y9QL8hPsQt7n4 7wWS+NNrynmY8KgBG95JSFMI/KkQCqXrdHZ6bx3/PA6MPeSYaHLf6eBz8UNLK9uVBK 9ZZeBkDPFljEkMXa/5koUgc/oZsqWW1DqZXpiVOE=
MIME-version: 1.0
Content-transfer-encoding: 7bit
Content-type: TEXT/PLAIN; CHARSET="us-ascii"; Format="flowed"
Received: from mauve.mrochek.com by mauve.mrochek.com (PMDF V6.1-1 #35243) id <01RNQ8L5UHLC0085YQ@mauve.mrochek.com> (original mail from NED@mauve.mrochek.com) for dmarc@ietf.org; Tue, 28 Jul 2020 07:36:28 -0700 (PDT)
From: ned+dmarc@mrochek.com
Cc: IETF DMARC WG <dmarc@ietf.org>
Message-id: <01RNRIK4ZEKO0085YQ@mauve.mrochek.com>
Date: Tue, 28 Jul 2020 07:03:09 -0700
In-reply-to: "Your message dated Tue, 28 Jul 2020 06:52:47 -0700" <579385ce-b67d-9db0-0a9d-fdce9fece75d@dcrocker.net>
References: <579385ce-b67d-9db0-0a9d-fdce9fece75d@dcrocker.net>
To: Dave Crocker <dhc@dcrocker.net>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dmarc/K_0-PUanAXRGI8_ObxF5NCn4xPg>
Subject: Re: [dmarc-ietf] Separating DMARC alignment validation from DMARC policy
X-BeenThere: dmarc@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Domain-based Message Authentication, Reporting, and Compliance \(DMARC\)" <dmarc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dmarc>, <mailto:dmarc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dmarc/>
List-Post: <mailto:dmarc@ietf.org>
List-Help: <mailto:dmarc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dmarc>, <mailto:dmarc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 28 Jul 2020 14:41:45 -0000

The MIME document split was, in hindsight, partly successful (separation of
media types registration was a really good thing), partly unsuccessful (part
five should not have been pulled out of part two), and partly a wash (the
cost/benefit of separating parts one and two ended up pretty much equal IMO).

The devil is always in the details. The DMARC alignment validation process
appears free of policy considerations as currently specified, and is thus a
candidate for separation. But are we sure it will remain so, and is the
separation of a relatively small part of the specification worth it?

				Ned

> I am not a fan of splitting documents only for an abstract sense of
> cleanliness.  There needs to be justification of improved documentation
> 'cleanliness' and/or useful removal of fate-sharing -- if separate fates
> are reasonably expected.


> DMARC alignment validation is a basic, mechanical process that produces
> a yes/no response.  At that level, it's comparable to the nature of a
> DKIM validation, except for the From: field domain.

> DMARC "policy" is fundamentally different.  It's not that its mechanism
> isn't "mechanical" but that its semantics produce more semantic and
> operational challenges.


> I think that could reasonably make it worth strongly separating them
> into two different documents, no matter has small one of the documents
> might be.



> d/
> --
> Dave Crocker
> Brandenburg InternetWorking
> bbiw.net

> _______________________________________________
> dmarc mailing list
> dmarc@ietf.org
> https://www.ietf.org/mailman/listinfo/dmarc