Re: [dmarc-ietf] Ticket #55 - Clarify legal and privacy implications of failure reports

Michael Thomas <mike@mtcc.com> Wed, 06 January 2021 15:07 UTC

Return-Path: <mike@fresheez.com>
X-Original-To: dmarc@ietfa.amsl.com
Delivered-To: dmarc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3ACA93A0E31 for <dmarc@ietfa.amsl.com>; Wed, 6 Jan 2021 07:07:43 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.012
X-Spam-Level:
X-Spam-Status: No, score=-2.012 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.248, HTML_MESSAGE=0.001, NICE_REPLY_A=-0.262, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mtcc.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7W1bZaj1AKPj for <dmarc@ietfa.amsl.com>; Wed, 6 Jan 2021 07:07:41 -0800 (PST)
Received: from mail-pg1-x535.google.com (mail-pg1-x535.google.com [IPv6:2607:f8b0:4864:20::535]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BAD923A0E1D for <dmarc@ietf.org>; Wed, 6 Jan 2021 07:07:41 -0800 (PST)
Received: by mail-pg1-x535.google.com with SMTP id 30so2407069pgr.6 for <dmarc@ietf.org>; Wed, 06 Jan 2021 07:07:41 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mtcc.com; s=fluffulence; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language; bh=7dKXODBem6Ii/6verLPzuxc04ur+FX/pdbl5N0Ylbio=; b=foO6AYdgtm1+s+pZBlkWxaKx60wgTXJTq741Ph8gfdzlPW7eaVIQsmngJL7an2+N3K 2DKEaKgahf/L5w/lAMSUWSTvyhd4UtgyH5UKGTxJJZPrdy3KgtrbKniAfRlAvDMme7ue 45tR1joPMtbFVIZQzpAeWuYAFgt/cWUpHyqTcCAL4Clt+ySj5BQAt7fzHQpu2bL+Li/y ft+WRGI58S2giZqoExRHQ3aSkrvcubeOC47PSp4jJftm7v7Ce/hawLeAz8MUjvQ65qcD sE+qDjEA3gcLWtAazWhluk4YiHWEtJMGPLoRgdEXOFtxD4fMNCSbrQcxmM+whui/j3qQ qytQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language; bh=7dKXODBem6Ii/6verLPzuxc04ur+FX/pdbl5N0Ylbio=; b=kyj96sKpog9jTVNeyIAdXFGkuxWXcLOXV71V+S7YLhjfhd0Rulnc4r7xzbmURjLa9a MV7PFzm/a9O4KzVU/cKwstHM1mKhRZVe5WRev1x/XCCK/Ucm5yuX0o6Zldu++ARum7PC uWrb9SSuCPKCnsCzF4GLZS3nKRgy2S9hc2+aTPQUM1UPlh2NvCOdTong7eQZt5L+9mjw /dU1Oc1tAdgQ6NZrLoYXLrRK+vp8g58rGDFGvPbSSI0ajGplSkEZQ1Y47sLRPft6RP9c SwkSawvk0Ctr4Lk6yoIMDO4+5ZyM4tv6JehTnvankn/VeOM5PGfG0HqO//gwQ5Gsyd6B E0UQ==
X-Gm-Message-State: AOAM5310iTwWtUjVkZ7FmUVsIk4has3vHgoyCTNNIOwIK6UhRzM4bsRc p+qq5hk5UnMHWdJR4ejhfvAU++4WXXXnh8Rn
X-Google-Smtp-Source: ABdhPJwC9S69ogfFPL795dY1LvRQlbLK5Aov6sjFYuvqB7GcxmOp4rCxdfDbg8YnGXpW6NWlZyRXjg==
X-Received: by 2002:a63:308:: with SMTP id 8mr4943692pgd.15.1609945660860; Wed, 06 Jan 2021 07:07:40 -0800 (PST)
Received: from mike-mac.lan (107-182-39-88.volcanocom.com. [107.182.39.88]) by smtp.gmail.com with ESMTPSA id 9sm2902307pfn.188.2021.01.06.07.07.39 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 06 Jan 2021 07:07:40 -0800 (PST)
To: Dotzero <dotzero@gmail.com>
Cc: Douglas Foster <dougfoster.emailstandards@gmail.com>, Dave Crocker <dcrocker@gmail.com>, IETF DMARC WG <dmarc@ietf.org>
References: <20210104174623.2545154CFF9F@ary.qy> <FD45F9FC-46B0-40A9-ADC6-DDD7650D62F2@bluepopcorn.net> <ae77d9f-6f63-16ca-903a-7cb463a7b58d@taugh.com> <CABuGu1o2t7WaEOh+nsx3_MRUGgGHqKHzQ9302FM9-HL0GxvJvA@mail.gmail.com> <f15c8f53-8075-99a1-83c7-f687200e6a94@gmail.com> <f640ee95-ba0a-6aa7-1a14-2af1db151e27@mtcc.com> <050e8614-c088-a165-a733-35c5eee52eed@gmail.com> <cd3a41e8-cc4f-05eb-5c86-47b0047e8d08@mtcc.com> <d9e23994-8666-5c3f-3e42-9a12a2ed6daf@gmail.com> <CAH48Zfxef+5H7nh7ahHvaP+B=+i1OB7XfFB+ptkcWeDRt0o8Mw@mail.gmail.com> <9926b42c-f767-6355-a940-6862f2e4ffb8@mtcc.com> <CAJ4XoYe+Wbs16WGLXf-33dzwg1bu6K73rS2RN=jNR4xcJ-FZHA@mail.gmail.com> <67638446-094e-b598-adc5-dd540c69d487@mtcc.com> <CAJ4XoYcOHiC-sHxd_h+cqjioSpiupjFpR82p21kZ_7nPNZErcA@mail.gmail.com>
From: Michael Thomas <mike@mtcc.com>
Message-ID: <d6a9c579-c440-98c9-8044-89e0dcd4d467@mtcc.com>
Date: Wed, 06 Jan 2021 07:07:38 -0800
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:78.0) Gecko/20100101 Thunderbird/78.6.0
MIME-Version: 1.0
In-Reply-To: <CAJ4XoYcOHiC-sHxd_h+cqjioSpiupjFpR82p21kZ_7nPNZErcA@mail.gmail.com>
Content-Type: multipart/alternative; boundary="------------F2C6870C185FF9AC7CB9F672"
Content-Language: en-US
Archived-At: <https://mailarchive.ietf.org/arch/msg/dmarc/YhZHWCdSZCRc9n01UE5aj5GoTWk>
Subject: Re: [dmarc-ietf] Ticket #55 - Clarify legal and privacy implications of failure reports
X-BeenThere: dmarc@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Domain-based Message Authentication, Reporting, and Compliance \(DMARC\)" <dmarc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dmarc>, <mailto:dmarc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dmarc/>
List-Post: <mailto:dmarc@ietf.org>
List-Help: <mailto:dmarc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dmarc>, <mailto:dmarc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 06 Jan 2021 15:07:43 -0000

On 1/6/21 6:59 AM, Dotzero wrote:
>
>
> On Wed, Jan 6, 2021 at 9:41 AM Michael Thomas <mike@mtcc.com 
> <mailto:mike@mtcc.com>> wrote:
>
>
>     On 1/5/21 10:02 PM, Dotzero wrote:
>>
>>
>>     On Tue, Jan 5, 2021 at 8:19 PM Michael Thomas <mike@mtcc.com
>>     <mailto:mike@mtcc.com>> wrote:
>>
>>         No it was an unalloyed good that you brought that up. We can
>>         use a much
>>         more data-driven approach rather than opinion and conjecture.
>>         It would
>>         be good for it to be required reading for everybody on this
>>         working
>>         group, and not snarled at as a heresy. DKIM itself was a leap
>>         of faith.
>>         16 years later it is gratifying that we have data.
>>
>>         Mike
>>
>>
>>     DKIM was NOT a leap of faith. At the time there was plenty of
>>     data from DK (Domain Keys) and IIM to inform those involved.
>>     Please stop making assertions of "fact" which are simply not true.
>>
>     Um, dude, I was one of the authors of IIM. You're literally
>     claiming to know more than me about what was in my head.
>
>     Mike
>
>
> So all the data was in your head? I wasn't using IIM but was 
> publishing DK and getting feedback from Yahoo! and a few other 
> receivers through private channels. There were other senders in a 
> similar situation as myself. And yes, people were discussing things 
> privately (Web of Trust groups). Your claim that there was no data 
> available at the time is quite simply false.
>
You are literally telling me what I knew at the time. It was a lot of 
the reason that we got push back to form the DKIM working group. It 
wasn't until I read that paper that I got some concrete feel for how it 
affected things, and that was 16 years later. The biggest change for the 
better was senders closing open relays. It's still not clear that DKIM 
had any affect on that.

Mike