Re: [dmarc-ietf] ARC-Seal is meaningless security theatre

[Dave Crocker <[e-mail]>]

On 8/18/2017 11:10 AM, Murray S. Kucherawy wrote:
> 
> While I would normally agree firmly with that position, my view in this 
> case is softer given what I believe was consensus (I'm not the chair, so 
> that's not my call officially) that we're going to go for Experimental 
> status.
> 
> I submit that our primary mission here per our charter is to come up 
> with a mechanism that mitigates DMARC's damage to mailing lists.  The 
> claim that ARC as designed over-engineers a solution seems secondary to 
> me; the question we need to answer is "Can this mitigate the damage?"  
> With or without Bron's reduced design, that's the question before us.


Going for Experimental does not relieve the working group from trying to 
do careful engineering.

I'm sure you didn't mean to suggest otherwise, but fear that the result 
will be publishing a spec for something that is more complicated than it 
needs to be or less well understood than it needs to be.  Or both.

d/

-- 
Dave Crocker
Brandenburg InternetWorking
bbiw.net