Re: [dmarc-ietf] Apropos of the de-munging draft

Alessandro Vesely <vesely@tana.it> Mon, 03 August 2020 07:25 UTC

Return-Path: <vesely@tana.it>
X-Original-To: dmarc@ietfa.amsl.com
Delivered-To: dmarc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AEC6E3A09A9 for <dmarc@ietfa.amsl.com>; Mon, 3 Aug 2020 00:25:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.147
X-Spam-Level:
X-Spam-Status: No, score=-1.147 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, NICE_REPLY_A=-0.949, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1152-bit key) header.d=tana.it
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lLE7p7fRAV5k for <dmarc@ietfa.amsl.com>; Mon, 3 Aug 2020 00:25:39 -0700 (PDT)
Received: from wmail.tana.it (wmail.tana.it [62.94.243.226]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 06F3E3A098B for <dmarc@ietf.org>; Mon, 3 Aug 2020 00:25:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tana.it; s=delta; t=1596439536; bh=X6t+Rl4a8Sg8LOZmCPxhkOu1LfjxuQA6+WH+WDBpQ64=; l=1229; h=To:References:From:Date:In-Reply-To; b=CsYS/7br62/8/M4khnJNi5ruIbkWcfqYrkBzVvKyIz7Y8GVZCkE/qB5kRfUFtEmNX f7SrwRQadgYIUqJ08l1QgGXWIZWWjZyuGwDllCB5KgYU7AVpCZiJxZspwQpjB7Ch1i VaWuF1Bm+428ThSQi/TB9GkdZf2EjTeBZdpAm2ad+UT7C+9noC0Nv/LfSQEvu
Authentication-Results: tana.it; auth=pass (details omitted)
Received: from [192.168.1.102] ([5.170.69.219]) (AUTH: CRAM-MD5 uXDGrn@SYT0/k, TLS: TLS1.3, 128bits, ECDHE_RSA_AES_128_GCM_SHA256) by wmail.tana.it with ESMTPSA id 00000000005DC053.000000005F27BBF0.00006DC2; Mon, 03 Aug 2020 09:25:36 +0200
To: John Levine <johnl@taugh.com>, dmarc@ietf.org
References: <20200802175142.9576E1DC8B47@ary.qy>
From: Alessandro Vesely <vesely@tana.it>
Message-ID: <17517794-79d2-806c-0da2-5ff80342d63f@tana.it>
Date: Mon, 03 Aug 2020 09:25:34 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0
MIME-Version: 1.0
In-Reply-To: <20200802175142.9576E1DC8B47@ary.qy>
Content-Type: text/plain; charset="utf-8"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/dmarc/KkUhophwsUCLLOif0Y3jLAoUwE8>
Subject: Re: [dmarc-ietf] Apropos of the de-munging draft
X-BeenThere: dmarc@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Domain-based Message Authentication, Reporting, and Compliance \(DMARC\)" <dmarc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dmarc>, <mailto:dmarc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dmarc/>
List-Post: <mailto:dmarc@ietf.org>
List-Help: <mailto:dmarc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dmarc>, <mailto:dmarc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 03 Aug 2020 07:25:41 -0000

On 2020-08-02 7:51 p.m., John Levine wrote:
> In article <d4147037-701f-520b-4355-9a07fd708467@tana.it> you write:
>>> Unwrapping a MIME attachment is a lot easier than the proposed DKIM
>>> unmunging but I doubt either is going to show up in MUAs any time
>>> soon. Perhaps you could do it in a mail gateway.
>>
>>
>> Looking at the steps required to carry out the proposed unmunging, "a lot easier" doesn't seem to be an accurate measurement.
> 
> In python it's about two lines since there are well debugged libraries to handle MIME.  Same in most other languages.


If you use a library, most common operations can be done better than unusual ones, the actual complexity notwithstanding.

The steps I outlined for tf=footer[*] can be done adding a few lines to Murray's library, in C.


> I still would be amazed if any MUAs did this, also keeping in mind that the changes that MLMs make ARE USEFUL.


Agreed.  IMHO, Murray's lib should do just a virtual unmunge, while canonicalizing.

To actually replace From: with the original Author: can be done by the MDA, based on trusted A-Rs, after any dot-forward.

Best
Ale
-- 

[*] https://mailarchive.ietf.org/arch/msg/dmarc/2ZN7DS5NktoyEPItZ5vzr-xd0Mc