Re: [dmarc-ietf] p=quarantine

Laura Atkins <laura@wordtothewise.com> Mon, 14 December 2020 15:31 UTC

Return-Path: <laura@wordtothewise.com>
X-Original-To: dmarc@ietfa.amsl.com
Delivered-To: dmarc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 624AE3A0BAD for <dmarc@ietfa.amsl.com>; Mon, 14 Dec 2020 07:31:46 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.198
X-Spam-Level:
X-Spam-Status: No, score=-0.198 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=wordtothewise.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xfUCSbkd0SXD for <dmarc@ietfa.amsl.com>; Mon, 14 Dec 2020 07:31:45 -0800 (PST)
Received: from mail.wordtothewise.com (mail.wordtothewise.com [104.225.223.158]) by ietfa.amsl.com (Postfix) with ESMTP id 113333A0BA9 for <dmarc@ietf.org>; Mon, 14 Dec 2020 07:31:44 -0800 (PST)
Received: from [192.168.0.227] (unknown [37.228.231.27]) by mail.wordtothewise.com (Postfix) with ESMTPSA id 6251A9F149; Mon, 14 Dec 2020 07:31:43 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wordtothewise.com; s=aardvark; t=1607959904; bh=5P7Lxv0CMjIz0tPqmWKpx73zes3QE8Rizy7CabEu6Sc=; h=From:Subject:Date:In-Reply-To:Cc:To:References:From; b=GnGnhXCyhm3gdvrCza92xFYksQ6ucodkjZa/js/U1nTt4Kc0O0VyS94OpqHdWcS2y keGFOshx6NERCvac6sPi7lg4uiDOauwytIot2BUIj/qD9d1abeQTAZbniCRSMnlF5E bbJ6SSRGKpPMy+Qj7XlahAMikIfMarVJ61EsAfIU=
From: Laura Atkins <laura@wordtothewise.com>
Message-Id: <B2A08113-E8E9-4D7D-B23E-1DA2280C7D92@wordtothewise.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_C843D70D-3B65-4C1D-ACB3-F2B2F907DB5D"
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\))
Date: Mon, 14 Dec 2020 15:31:41 +0000
In-Reply-To: <a57178c7-4b99-85af-3ecd-be4b5aa32432@gmail.com>
Cc: John Levine <johnl@taugh.com>, dmarc@ietf.org
To: Dave Crocker <dcrocker@gmail.com>
References: <20201211173722.6B4DF29782C7@ary.qy> <ea074aad-971b-abc6-d557-ea2f433b3cc7@gmail.com> <6dc2d62e-e288-8d8f-44b2-6f42e7e580@taugh.com> <a57178c7-4b99-85af-3ecd-be4b5aa32432@gmail.com>
X-Mailer: Apple Mail (2.3608.120.23.2.4)
Archived-At: <https://mailarchive.ietf.org/arch/msg/dmarc/QP2nl7Nl6yAWAgRty23ASTXhaBA>
Subject: Re: [dmarc-ietf] p=quarantine
X-BeenThere: dmarc@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Domain-based Message Authentication, Reporting, and Compliance \(DMARC\)" <dmarc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dmarc>, <mailto:dmarc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dmarc/>
List-Post: <mailto:dmarc@ietf.org>
List-Help: <mailto:dmarc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dmarc>, <mailto:dmarc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Dec 2020 15:31:46 -0000


> On 14 Dec 2020, at 15:10, Dave Crocker <dcrocker@gmail.com> wrote:
> 
> On 12/12/2020 10:51 AM, John R Levine wrote:
>> On Sat, 12 Dec 2020, Dave Crocker wrote:
>>>> p=reject: all mail sent from this domain should be aligned in a DMARC
>>>> compliant way. We believe that unaligned mail is from unauthorized
>>>> senders so we ask receivers to reject it, even though that might mean
>>>> some of our authorized senders' mail is rejected too.
>>> 
>>> As soon as this specification text, here, contains language about how this information is to be used, should be used, or could be used, it crosses over into creating confusion about expectations of receiver handling.
>> 
>> I agree with you, which is why I said "believe" and "request".
> 
> Except that that runs contrary to my point, rather than being compatible with it.
> 
> Any an all discussion of receiver /use/ of DMARC needs to be moved to a separate section and it needs to refrain from any linguistic form that characterizes
> that use as being in response to domain owner desires.

‘As a matter of policy we treat all unaligned mail as unauthorized use of our domain.’ 

I am agnostic about moving the ‘what to do’ section. I think it makes sense to keep the sender definitions and the ways receivers can interpret those declarations close together. 

>> If we're going to have any description of p=none at all it needs to emphasize the point that it's telling you that they consider the messages unusually unimportant.  This appears to be at odds with what some DMARC users believe.
> 
> It isn't about the 'importance' of the messages.  It is about the domain owner's view of the implication of the success or failure of DMARC validation.

The current p=reject is that the domain owner’s view is that the mail is unauthorized. And, according to discussion here on the IETF list, we are to presume that every domain owner knows exactly what they are doing and that every company understands the implications of a p=reject policy statement. 

laura 

-- 
Having an Email Crisis?  We can help! 800 823-9674 

Laura Atkins
Word to the Wise
laura@wordtothewise.com
(650) 437-0741		

Email Delivery Blog: https://wordtothewise.com/blog