Re: [dmarc-ietf] Tree walk nits

John Levine <johnl@taugh.com> Wed, 22 June 2022 02:12 UTC

Return-Path: <johnl@iecc.com>
X-Original-To: dmarc@ietfa.amsl.com
Delivered-To: dmarc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9A845C14CF03 for <dmarc@ietfa.amsl.com>; Tue, 21 Jun 2022 19:12:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.857
X-Spam-Level:
X-Spam-Status: No, score=-1.857 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.25, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=iecc.com header.b=laHyMf0m; dkim=pass (2048-bit key) header.d=taugh.com header.b=JRPg6/xK
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lCMPhVKfCxss for <dmarc@ietfa.amsl.com>; Tue, 21 Jun 2022 19:12:01 -0700 (PDT)
Received: from gal.iecc.com (gal.iecc.com [IPv6:2001:470:1f07:1126:0:43:6f73:7461]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3800AC14F748 for <dmarc@ietf.org>; Tue, 21 Jun 2022 19:12:00 -0700 (PDT)
Received: (qmail 30606 invoked from network); 22 Jun 2022 02:11:57 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:cleverness; s=778b.62b27a6d.k2206; bh=iY416+vHlgCpmNGyin9jX4WdyDnARfE+onrJIV6stp0=; b=laHyMf0msHvUL7/kgc0GKsAGJsINDCeBLlMmYp5Jze+X5k2dygoGvOsYGUfnITHiXMDhah5Kxay69s6pqRZZCGLxsbaUUO5HBpCNhVQlP3zeisxOhdisXcmwiT3H8vJRS4EVVt+8FGLDaDYXjl50HafO6R91byz9YVT9/8Q1vQS86i+KRO7mxO7n84goj6tIdkzABlwyVTmHJ/Sy4e8CAFiWQjCn0el2rnxUl4z34q5HMtgYW4F0DUpLxpTNrXgKzsGSb8wDPfpd+VGur5F7vZz/DMSbZ2UltlhAwTjuydViyazbOFek2ZWxBLIeOCCAsKmmn/USyaXxaROrUI9f0w==
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=taugh.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:cleverness; s=778b.62b27a6d.k2206; bh=iY416+vHlgCpmNGyin9jX4WdyDnARfE+onrJIV6stp0=; b=JRPg6/xK2b5o/VBHWPDEhk+jXLYt9JyBwoQDerP2mLKwdHmB+dK53Rf83OcrMjxguHrArZ+fJ7LNPwWd0dHDDsRtxT0JijnbtwkfxKAVacxtVihtMwqk7MvFeD2+0EJcz3PqvMbk1eNjyCO8BPt/m1zpiUL63qYPdPK0xwE71QTy6sc3YwJHtFdTKSfXjsv6BT3PCD0h7aeYsOtpblrCMKgcqVgyQETRrY140WiZGSx2YLI3ZaETtBilqdlZKKIcAYNNQO1tJm6rlK1JZyXSb7lrFjGHyCLbGfUdCY31FCzPHWjvxXfkGVXbbzEmN7sZL0bXRePXZ/lL53fbeKf7sA==
Received: from ary.qy ([IPv6:2001:470:1f07:1126::78:696d:6170]) by imap.iecc.com ([IPv6:2001:470:1f07:1126::78:696d:6170]) with ESMTPS (TLS1.3 ECDHE-RSA AES-256-GCM AEAD) via TCP6; 22 Jun 2022 02:11:57 -0000
Received: by ary.qy (Postfix, from userid 501) id D8F1043F6098; Tue, 21 Jun 2022 22:11:56 -0400 (EDT)
Date: Tue, 21 Jun 2022 22:11:56 -0400
Message-Id: <20220622021157.D8F1043F6098@ary.qy>
From: John Levine <johnl@taugh.com>
To: dmarc@ietf.org
Cc: sklist@kitterman.com
In-Reply-To: <29052171.xTAUad66BK@zini-1880>
Organization: Taughannock Networks
X-Headerized: yes
Cleverness: minimal
Mime-Version: 1.0
Content-type: text/plain; charset="utf-8"
Content-transfer-encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/dmarc/T-8NX63L8ilHPhHXMygKdTJ6zMM>
Subject: Re: [dmarc-ietf] Tree walk nits
X-BeenThere: dmarc@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Domain-based Message Authentication, Reporting, and Compliance \(DMARC\)" <dmarc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dmarc>, <mailto:dmarc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dmarc/>
List-Post: <mailto:dmarc@ietf.org>
List-Help: <mailto:dmarc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dmarc>, <mailto:dmarc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 22 Jun 2022 02:12:06 -0000

It appears that Scott Kitterman  <sklist@kitterman.com> said:
>As written, I think it produces the correct result.

I now think it's close but not quite.

>As written you take the domain with a (non-PSD) DMARC record with the fewest 
>labels, ....

How about this?

a NXDOMAIN (or psd=y, doesn't matter)
b.a blah
c.b.a psd=y
d.c.b.a blah
e.d.c.b.a NXDOMAIN

The org or policy domain for e.d.c.b.a is d.c.b.a, but the one with
the fewest labels is b.a. This is why we walk up rather than down.

This shouldn't be hard to fix but I'm trying to figure out the least
confusing way of saying it.

R's,
John