Re: [dmarc-ietf] Some Proposed Language for a New pct Tag Defintion

"Murray S. Kucherawy" <superuser@gmail.com> Sat, 07 August 2021 05:51 UTC

Return-Path: <superuser@gmail.com>
X-Original-To: dmarc@ietfa.amsl.com
Delivered-To: dmarc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 85CC23A2AF2 for <dmarc@ietfa.amsl.com>; Fri, 6 Aug 2021 22:51:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MV4-3vxXG-hA for <dmarc@ietfa.amsl.com>; Fri, 6 Aug 2021 22:51:52 -0700 (PDT)
Received: from mail-ua1-x929.google.com (mail-ua1-x929.google.com [IPv6:2607:f8b0:4864:20::929]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 616B93A2AF1 for <dmarc@ietf.org>; Fri, 6 Aug 2021 22:51:52 -0700 (PDT)
Received: by mail-ua1-x929.google.com with SMTP id d22so4571249uaw.11 for <dmarc@ietf.org>; Fri, 06 Aug 2021 22:51:52 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=McUAHG7YFQGEA3bfsAy2qyreM+BIR8qM5BDTW30NfUw=; b=pX8wo0xGSy/eka3Eb5eAW6dEcvOoatU9WNmEkG1VkLET45kfTipzazsGCcbt17oKM4 dOlCxgWrdMy0oXaPf5GdhEyKZVoogc5f/+eb99SIPJoBontI1+mljCT7fGvZfD3mgfau AlpnldazA/sU5kydgvbJmASRwyyWweN2HyFg9/canaJFLuPpnGgNRf+jN77+ATuqw+15 2qxEpoZ5UoC6F9yyxjniu+rF1sKiyVtTEDUqBtpaQ/VjYICDho8QgygU+ErG6FTVkOXH r/9xrg56trnB9hPp8pY7kC5whVZWYl8TOb9LffkODt/sWbPWiMMS3e/EdXvYEnsWHp/e tYvA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=McUAHG7YFQGEA3bfsAy2qyreM+BIR8qM5BDTW30NfUw=; b=jYdPDQuscYevlS9idI5rkpUojOXmauw8B52jvbBmwv7VgsS1R3LxKVC+ztEYmBo1B4 ijfqZgFpGVhxXObRdcbWuENTAqGxhP3ywnS36ExAj0lXA6UOqPWnbMX/xzgcWJQbTnit DsBfTPEzabGACHttyMZGsBGhO7f2OFLygEaIu2ek0bliwp31mcbvieZWSLw5A57DBPpu 0MhdkBZTyL1uVL9VB5cD4Ud9M+90Yvm3af5l0/TCwa8N9biBET4KV8zxHwZ2rUKd2QjX Ek1PaIMixeWWarVI0vF9LoLxXaPHh8iDxF0mjz6QZRq5P4aXRNfKjwr7ZG6vtoZ8GA8K n4gA==
X-Gm-Message-State: AOAM532QMHTDbGs3BJKmYINrBi7gI0+dCOyYqwIZaXDV4pwBBH+VmMni 1mrZkPHmwgW2BgTRk9Q+m0nhounvsKOOOZcwKa8=
X-Google-Smtp-Source: ABdhPJy4eenAwi7ZPEHz1GcvWIOUQHwOMguB9bhi4aKDl0CH54Kle43Py3eovyAKsM+N6bv2Qtf4ICUYWVr5VNvrrQE=
X-Received: by 2002:ab0:1e07:: with SMTP id m7mr11017722uak.67.1628315510464; Fri, 06 Aug 2021 22:51:50 -0700 (PDT)
MIME-Version: 1.0
References: <CAHej_8m4W_k_r9SV6reNJA7aMGFCkK451tjvQGtrPNwRtJwC8A@mail.gmail.com> <20210731203844.1DBB42566507@ary.qy> <CAHej_8=LL_KWcVYnc2quYSGMnQF5bdoerDtTZZm1yGjxjCqW1Q@mail.gmail.com> <260d86d5-bb98-c2bd-3d19-e03cc83080e5@tana.it> <CAH48ZfzX2K9JHZpr0WgtAto3cMeJ5tbwPPM61rPNvan92Cx7bQ@mail.gmail.com>
In-Reply-To: <CAH48ZfzX2K9JHZpr0WgtAto3cMeJ5tbwPPM61rPNvan92Cx7bQ@mail.gmail.com>
From: "Murray S. Kucherawy" <superuser@gmail.com>
Date: Fri, 06 Aug 2021 22:51:37 -0700
Message-ID: <CAL0qLwZQp4N6mEh+peQcEOdQe_EOPHCk7vPHwLZcdujnZJ+87w@mail.gmail.com>
To: Douglas Foster <dougfoster.emailstandards@gmail.com>
Cc: Alessandro Vesely <vesely@tana.it>, Todd Herr <todd.herr@valimail.com>, IETF DMARC WG <dmarc@ietf.org>
Content-Type: multipart/alternative; boundary="00000000000095648905c8f1bf3f"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dmarc/RYmz1VTijkYZ9nMj0rPZHiVh7o4>
Subject: Re: [dmarc-ietf] Some Proposed Language for a New pct Tag Defintion
X-BeenThere: dmarc@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Domain-based Message Authentication, Reporting, and Compliance \(DMARC\)" <dmarc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dmarc>, <mailto:dmarc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dmarc/>
List-Post: <mailto:dmarc@ietf.org>
List-Help: <mailto:dmarc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dmarc>, <mailto:dmarc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 07 Aug 2021 05:51:56 -0000

On Thu, Aug 5, 2021 at 4:22 AM Douglas Foster <
dougfoster.emailstandards@gmail.com> wrote:

> PCT could work IF evaluators are willing and able to send a Temporary
> Error result (probably 451), instead of a permanent error, when
> - a DMARC verification fails,
> - the message is not unconditionally blocked or accepted on other
> criteria, and
> - the sender's PCT is between 1 and 99.
> The result should include an extended status code in the 4.7.2x range.
>
> This approach assumes that the temporary error status will cause the
> sender to retry multiple times over an extended period.
>

It should, since that's what the standard says ought to happen.  But then,
as was observed elsewhere in this thread, not all clients behave that way.

Based on observed configurations, this probably works out to at least 10
> attempts.  In most cases, the PCT formula will cause the message to be
> accepted after a delay, which is a result equivalent to PCT=0.
>

We usually use 4yz SMTP reply codes to mean there's some transient
condition preventing delivery; a later retry may yield a different result.
Random chance seems an awkward thing to shoe-horn into the notion of
"transient condition".

I think this could also DMARC skew statistics, as now any given message
could result in multiple distinct delivery attempts over a period usually
measured in days.  Care would have to be taken to identify and aggregate
the ones representing the same message.

-MSK