IETF Logo Mail Archive

Re: [dmarc-ietf] non-mailing list use case for differing header domains

Jesse Thompson <jesse.thompson@wisc.edu> Thu, 30 July 2020 20:46 UTC

Return-Path: <jesse.thompson@wisc.edu>
X-Original-To: dmarc@ietfa.amsl.com
Delivered-To: dmarc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 943153A0CF0 for <dmarc@ietfa.amsl.com>; Thu, 30 Jul 2020 13:46:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.1
X-Spam-Level:
X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, MSGID_FROM_MTA_HEADER=0.001, NICE_REPLY_A=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=wisc.edu
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tgq3ZnjW_Ovb for <dmarc@ietfa.amsl.com>; Thu, 30 Jul 2020 13:46:42 -0700 (PDT)
Received: from wmauth4.doit.wisc.edu (wmauth4.doit.wisc.edu [144.92.197.145]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4C4A53A0CB4 for <dmarc@ietf.org>; Thu, 30 Jul 2020 13:46:41 -0700 (PDT)
Received: from NAM11-BN8-obe.outbound.protection.outlook.com (mail-bn8nam11lp2170.outbound.protection.outlook.com [104.47.58.170]) by smtpauth4.wiscmail.wisc.edu (Oracle Communications Messaging Server 8.0.2.4.20190812 64bit (built Aug 12 2019)) with ESMTPS id <0QEA01K1WV1SORB0@smtpauth4.wiscmail.wisc.edu> for dmarc@ietf.org; Thu, 30 Jul 2020 15:46:40 -0500 (CDT)
X-Wisc-Env-From-B64: amVzc2UudGhvbXBzb25Ad2lzYy5lZHU=
X-Spam-PmxInfo: Server=avs-4, Version=6.4.7.2805085, Antispam-Engine: 2.7.2.2107409, Antispam-Data: 2020.7.30.203917, AntiVirus-Engine: 5.75.0, AntiVirus-Data: 2020.7.23.5750001, SenderIP=[104.47.58.170]
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=WJGGw6/v1pxm6VAjjlu8YI/gr8hU/Ik3uJzuHtQ+7Kf4SnZPHO8JXYJWaCUTWxM9bSR0evcDx496xwCiF4SJnRgS1IH3qgTqTqcq0S3/TCLEYlEFPQ1PpkdyDdksfU+cPiEYzoB41jW+Yqoe7Afy34AMYGvp8SPCYZvFSeiWlYPKBhMDYus1qZ+ugrveJb46keBm8AqOAHLLLHJdEQZtsAFjvozI6VG7ywqmfFR8nrQtkE1I8zo+ttTvhf1rnIeFyrBwVwxZAjPb3D68bUY3JDK4EK+uP31SqjMP70eM1IEZLSurhQ/zAvGHoX2csh2o0F8w0DM30KvJ2tLcQKWLcA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=TQSR6wgpfmuSQJ9b9t/MpMKCMv0WwFCFQdkpDgAQPgs=; b=ed7nAg/N41vmp8PSd63yX1nY5xE8ZJgpX0qUPbQ/u2P262r7e0/Cs1RHDU/YcHQ9ByGrmMHs9f/fYSUOC7IbcwGP1vFYLPDAfFLZYq0qVlBsVLvK3BqFrFPR9+CDoYO/mLht7yAqWM+mR1liFQlE/QexjOlBdv6iVucO5Fmr7g+5wgdAYhQ7sL8Wue8+mn7w0MdbJfP78Yt6TWksj0FI+TE3HnWo2CEW08FJ/aIJxAnY2xfmiczSgRta3t8vefC+u1r+4fnFmOPSdcFKrxDUf8KgQcGAfQFdmRQKf/Ieo00gOWJQI/LU8bsYSzXaeQeMP9l7NOEJJIGrIyHfaIsFtw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=wisc.edu; dmarc=pass action=none header.from=wisc.edu; dkim=pass header.d=wisc.edu; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=wisc.edu; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=TQSR6wgpfmuSQJ9b9t/MpMKCMv0WwFCFQdkpDgAQPgs=; b=DHvNuEJYvXuHZMUN5obz7/buRXlFG0DsT6DIeeoWzMK0AWJdtAa85sc2VWWClUWKhkj2kCDc2wyyly9icuPGFJLSZI2Rfwp9lZZgJds3JbrypefbxStbIcJiGheX+HzK63VfHLKkvrlcex2K5DEBC5912yuYBqnd+8kW13NEIKo=
Received: from DM5PR0601MB3671.namprd06.prod.outlook.com (2603:10b6:4:7b::16) by DM6PR06MB4426.namprd06.prod.outlook.com (2603:10b6:5:25::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3239.16; Thu, 30 Jul 2020 20:46:39 +0000
Received: from DM5PR0601MB3671.namprd06.prod.outlook.com ([fe80::a92c:9a15:1bb0:4bfa]) by DM5PR0601MB3671.namprd06.prod.outlook.com ([fe80::a92c:9a15:1bb0:4bfa%7]) with mapi id 15.20.3216.033; Thu, 30 Jul 2020 20:46:39 +0000
To: superuser@gmail.com
Cc: IETF DMARC WG <dmarc@ietf.org>
References: <BY5PR13MB29998094418C8A6C25902569D7730@BY5PR13MB2999.namprd13.prod.outlook.com> <c0361cb2-b25b-5d75-cb1f-f9c87e3ecccc@tana.it> <AE9A3A9F-27FC-4935-B8E6-AB0CE1A6D5E2@wordtothewise.com> <5F204CB3.7080404@isdg.net> <000001d66503$4d447e50$e7cd7af0$@bayviewphysicians.com> <5F21B338.8000700@isdg.net> <542c8309-de14-330a-cfe9-26a03191dc84@wisc.edu> <CAL0qLwYpeTVLh6zY9xP6c4YKNWKWT8_W7dsaWYPxRUiNtg5Y9w@mail.gmail.com>
From: Jesse Thompson <jesse.thompson@wisc.edu>
Message-id: <27fc7dc6-2912-e5db-8019-d7dee8ec64bf@wisc.edu>
Date: Thu, 30 Jul 2020 15:46:37 -0500
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Thunderbird/80.0a1
In-reply-to: <CAL0qLwYpeTVLh6zY9xP6c4YKNWKWT8_W7dsaWYPxRUiNtg5Y9w@mail.gmail.com>
Content-type: text/plain; charset="utf-8"
Content-language: en-US
Content-transfer-encoding: 8bit
X-ClientProxiedBy: CH2PR10CA0015.namprd10.prod.outlook.com (2603:10b6:610:4c::25) To DM5PR0601MB3671.namprd06.prod.outlook.com (2603:10b6:4:7b::16)
MIME-version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
Received: from [10.0.2.111] (47.12.96.133) by CH2PR10CA0015.namprd10.prod.outlook.com (2603:10b6:610:4c::25) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3239.19 via Frontend Transport; Thu, 30 Jul 2020 20:46:38 +0000
X-Originating-IP: [47.12.96.133]
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-HT: Tenant
X-MS-Office365-Filtering-Correlation-Id: 1ad24f05-a98c-42a0-c0a3-08d834c9a86f
X-MS-TrafficTypeDiagnostic: DM6PR06MB4426:
X-Microsoft-Antispam-PRVS: <DM6PR06MB44267D6DAA0E19627A868708F6710@DM6PR06MB4426.namprd06.prod.outlook.com>
X-MS-Oob-TLC-OOBClassifiers: OLM:10000;
X-MS-Exchange-SenderADCheck: 1
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: vAXpN2cJSUx916820OQgzCmtocbzyH2jImHs8reYZZEdeoZ7Fq2KoKXTVZOGpRSpBL3hBKo1Ee+Q++ZlsR496vqoymdIFPPWbHZcPlROicc5mLSlz5oVGrNKqOwlfkxPyjbLImSBykfyozsmYCnON6hII1niYDIpZrh26Ho3ALQwLPgPnAsJ2Kyod6mcjd0JskCWkJ8fy9MTNeLX0zuF01JjzU6R3NfZHt7/hlmRXoe9wpnwgAodGNfB3QFTsE1JUFM1X49xEJ7jAUIzfOV5Ml4Frl1di37tE1dWF8wQWSfstyNMsqGQCqvJXOpZ2r+XmlLTtZgXMGIgtkeoUlk3AAla9yXiGWGRadgGIXsXHWM+smsNlOwbcGenA9KjebNPxWD4HsIdMOasw3ZSqHX8bwaXQafo/K9Osb7x+VR6pZV8KVBRDbIF12e0sR4wFC7o
X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DM5PR0601MB3671.namprd06.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(366004)(396003)(376002)(39860400002)(346002)(136003)(53546011)(31696002)(16526019)(36756003)(83380400001)(66476007)(8936002)(66556008)(66574015)(66946007)(26005)(5660300002)(786003)(86362001)(316002)(16576012)(186003)(31686004)(75432002)(8676002)(2616005)(956004)(44832011)(4744005)(2906002)(6486002)(4326008)(6916009)(478600001)(43740500002)(223123001)(130980200001); DIR:OUT; SFP:1101;
X-MS-Exchange-AntiSpam-MessageData: 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
X-OriginatorOrg: wisc.edu
X-MS-Exchange-CrossTenant-Network-Message-Id: 1ad24f05-a98c-42a0-c0a3-08d834c9a86f
X-MS-Exchange-CrossTenant-AuthSource: DM5PR0601MB3671.namprd06.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 Jul 2020 20:46:39.3591 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 2ca68321-0eda-4908-88b2-424a8cb4b0f9
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: LHBmsxyQ3eda50BiqVvdRGihxVxr35U4PtYmTbULpxXoQ6TGky9MWuC9norP17MTKtovYV3hyVIH0Mlib1DZFA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR06MB4426
Archived-At: <https://mailarchive.ietf.org/arch/msg/dmarc/OULJ_kAgoQbyXnCoAkGHUi-TKrg>
Subject: Re: [dmarc-ietf] non-mailing list use case for differing header domains
X-BeenThere: dmarc@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Domain-based Message Authentication, Reporting, and Compliance \(DMARC\)" <dmarc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dmarc>, <mailto:dmarc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dmarc/>
List-Post: <mailto:dmarc@ietf.org>
List-Help: <mailto:dmarc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dmarc>, <mailto:dmarc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 30 Jul 2020 20:46:49 -0000

On 7/30/20 2:47 PM, superuser@gmail.com wrote:
>     Email domains that have more than a few users don't want to authorize every potential 3rd party (converges quickly to all of them, for large/complex organizations) to sign as every user/address in the domain.  Even if SPF didn't have the 10 DNS lookup limitation, I would not choose put every 3rd party into our domains' SPF records.  I'd essentially be authorizing most of the [legitimate] internet to use the domains.
> 
> 
> Yes, it has this scaling problem.  Had it been shown to be effective at dealing with the indirect mail flows issues that DMARC forced to be front-and-center a few years later, I imagine we could've revised ATPS to be more scalable.

I almost suggested that an address-level authorization mechanism would be useful, but that seems un-scalable for manageability reasons.

Jesse

v2.23.0 | Report a Bug | By Email