[dmarc-ietf] Static allowlisting

[Alessandro Vesely <[e-mail]>]

For the third bullet in Section 3.1, we have:

    *  Limited reputation deployment:Even early deployers that validated
       ARC chains did not deploy robust, dynamic reputation.  Instead,
       they implemented “allow lists” of intermediaries whose ARC
       assertions were always (or mostly) accepted.  This provided
       utility in specific bilateral or consortium relationships but did
       not scale to the open Internet.

Again, this does not specify that the allowlisted domain has to remain 
at or above the oldest-pass value.  Trusting assertions that precede 
modifications by third parties can be dangerous —an obvious but often 
overlooked point.

This use case is presented negatively, although it sounds like a 
legitimate and useful allowlisting method.  If static allowlisting is to 
be criticized, the criteria for dynamic allowlisting should be made 
explicit.


Best
Ale
--