[dmarc-ietf] Re: New Tack - Learning from ARC Experiment

Alessandro Vesely <vesely@tana.it> Sat, 16 May 2026 16:51 UTC

Return-Path: <vesely@tana.it>
X-Original-To: dmarc@mail2.ietf.org
Delivered-To: dmarc@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id B7FBEEF491F3 for <dmarc@mail2.ietf.org>; Sat, 16 May 2026 09:51:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1778950304; bh=xkwpsNOFsNE6Cs4ihDJ5Z8Dhm6KSO6wFCWjePl8u9+w=; h=Date:Subject:To:Cc:References:From:In-Reply-To; b=MdXP/d6IOPgLmawD8FHcjIa/WipjCW857AwNei9SW9XmXEMUvsYOvh85RPT8ftLiV ji96gq+lihh7lj3D7EjFBwDKbEPW7LUwHvrbRGoECH+TZiqol1KRzoe3gK8YCquP00 QvlrkrjwuoyfnTpqIDB3Ri9lInsyTU55ktjtJ+UE=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1152-bit key) header.d=tana.it
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0hvZvIqeoO4A for <dmarc@mail2.ietf.org>; Sat, 16 May 2026 09:51:42 -0700 (PDT)
Received: from wmail.tana.it (wmail.tana.it [94.198.96.74]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 10E8EEF4910B for <dmarc@ietf.org>; Sat, 16 May 2026 09:51:33 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tana.it; s=delta; t=1778950292; bh=qyY142b/zY4RtH2R8Gkt0jx3NDpAOsoK9u3gdqYbSzE=; h=Date:Subject:To:Cc:References:From:In-Reply-To; b=BmXGq7o0TbfmFzCxhPvpHRal7ccFXpAiD0bkFo/eiJl1IEIl98g+sPlgoU5j3MEYY cjVqY3kjpjqrCnu2hapmZPThQvubKtS+0hDAfoaLDf/Q18FyGnUKEUASi1UXqyFdVA aF31FoF2VfmMfB3cxvTKlFBCEhTzQ2S9l/Wnhouyz6+BLGKBDJd4tBMTuArU8
Original-Subject: Re: [dmarc-ietf] Re: New Tack - Learning from ARC Experiment
Author: Alessandro Vesely <vesely@tana.it>
Received: from [172.25.197.87] (pcale.tana [::ffff:172.25.197.87]) (AUTH: CRAM-MD5 uXDGrn@SYT0/k, TLS: TLS1.3,128bits,ECDHE_RSA_AES_128_GCM_SHA256) by wmail.tana.it with ESMTPSA id 00000000005DC2E2.000000006A08A094.0000205E; Sat, 16 May 2026 18:51:32 +0200
Message-ID: <343588b1-1238-4195-846f-eecd185b682b@tana.it>
Date: Sat, 16 May 2026 18:51:25 +0200
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
To: John R Levine <johnl@ietf.email>, "Murray S. Kucherawy" <superuser@gmail.com>
References: <IA1PR12MB653180F1812B340891121599B3382@IA1PR12MB6531.namprd12.prod.outlook.com> <2bafa613-1861-4dd1-8e15-e400b73ab50b@tana.it> <CAL0qLwb5ED=o+=OGrGr=eW4nX-A9DR4BSDVSkzsNtDr0kShyqA@mail.gmail.com> <20260512194027.262BE1099FC6B@ary.local> <274bc4f7-9fb3-4f1c-b202-0e13b17ea465@tana.it> <CAL0qLwY=Jyu5dhQfd94fWdJ3X=hp0dAf9a2Gf65VRNA8Ga9uaA@mail.gmail.com> <d68908dc-4032-420f-b89c-749a75cde2c0@tana.it> <3e73dc4a-1c7c-44f4-0910-9bc261ff46a3@ietf.email>
Authentication-Results: tana.it; auth=pass (details omitted)
From: Alessandro Vesely <vesely@tana.it>
Content-Language: en-US, it-IT
In-Reply-To: <3e73dc4a-1c7c-44f4-0910-9bc261ff46a3@ietf.email>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Message-ID-Hash: M23FVXX77YK2DWPHYGFJOM2IB2CHSPIM
X-Message-ID-Hash: M23FVXX77YK2DWPHYGFJOM2IB2CHSPIM
X-MailFrom: vesely@tana.it
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-dmarc.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: dmarc@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [dmarc-ietf] Re: New Tack - Learning from ARC Experiment
List-Id: "Domain-based Message Authentication, Reporting, and Compliance (DMARC)" <dmarc.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dmarc/UIvDoXsdesPvJ41KXmitJX7vOoc>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dmarc>
List-Help: <mailto:dmarc-request@ietf.org?subject=help>
List-Owner: <mailto:dmarc-owner@ietf.org>
List-Post: <mailto:dmarc@ietf.org>
List-Subscribe: <mailto:dmarc-join@ietf.org>
List-Unsubscribe: <mailto:dmarc-leave@ietf.org>

On Sat 16/May/2026 18:13:34 +0200 John R Levine wrote:
>
> What work do you propose to do to support what you're asking for?


Mainly to understand whether the ARC experiment revealed a missing
authorization semantic.

ARC can preserve authentication results across intermediaries, but that
is not quite the same thing as establishing whether a mediation path is
acceptable.

If the distinction turns out not to be operationally useful, then ARC's
outcome helps establish that as well.  That negative conclusion would
still be useful to document explicitly.


Best
Ale
--