Re: [dmarc-ietf] Ticket #11 (and #112) - Proposed language

Douglas Foster <dougfoster.emailstandards@gmail.com> Thu, 17 June 2021 16:25 UTC

Return-Path: <dougfoster.emailstandards@gmail.com>
X-Original-To: dmarc@ietfa.amsl.com
Delivered-To: dmarc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E72D13A25D3 for <dmarc@ietfa.amsl.com>; Thu, 17 Jun 2021 09:25:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.096
X-Spam-Level:
X-Spam-Status: No, score=-2.096 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DZj_0tNbNM0M for <dmarc@ietfa.amsl.com>; Thu, 17 Jun 2021 09:25:03 -0700 (PDT)
Received: from mail-oi1-x230.google.com (mail-oi1-x230.google.com [IPv6:2607:f8b0:4864:20::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 174353A25D2 for <dmarc@ietf.org>; Thu, 17 Jun 2021 09:25:02 -0700 (PDT)
Received: by mail-oi1-x230.google.com with SMTP id x196so7106154oif.10 for <dmarc@ietf.org>; Thu, 17 Jun 2021 09:25:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=D+uOdT0RFO49uKJevEB89XBqe2HYe5pTjoXFc/mDKpw=; b=CseXqQnBufELCvWtbBpvTREJfYUw2bG2TnJxcNgiqvoNB+Cl4BKVsIR+IaeZ8tGH+p LUgEOl0v52Qv1c1GR+c3GBWCx862nC5bPMe0en4yonHH5x5JBDSftXZHZblpD2ZDbxUt V25SErVPbBTNGFEQjDjaRPsOa1XvHaPWcwQR9Fd/9kLjs8S1+l8j86H5kE7Oh0ZPMDUq 1+YBQlhrAHhtxteF4ImjlEMM+E2egLC1FJoatgM9STS5I1dl/jwaem3ncT7K2DlIWQHj 0fcei9Jj7B/WLilu3+v68Xyl+6fUHjHmh7VARCemhJkISMjzpcKpsAchmgvuoONLUieJ uvGQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=D+uOdT0RFO49uKJevEB89XBqe2HYe5pTjoXFc/mDKpw=; b=LvQWToI/D9WOnDFEZcRvOmj5Mc89NFoq8OI5TtWIUV1hFIDjARnzM/2cj3L7Ac/WvB 6WZ4d2S/V9XPfW4pNoHIhfPfiSw4aH0iwryljOshctMqYiMe8QWIASD2qiajJcD4aQyY SW+M/DfcdI2lztDN3ui+g+LRmyquGnpad0AAM8IhAe9z6ZQ0WwXD63ZpACv+AFg/O3O5 A6ZWpwbS+QwNlI0gpGIv48XSXx06Bxn53ah2Fu4w17PRzlG325I2IBe/VeEop+G+XpxR 5uk+/FfrS6AmEtq/YuNjDiQfP7OGmM7G6RxOTHBAXCvKv6lNMYsZo3+5aNECqi7dMZGR 0D0g==
X-Gm-Message-State: AOAM5339s2gvlrUJNh9sHQGJ8E8USv8O2XxA6Xgq/9bT5lLcNSO6E5Gp hHmqvHv/azf8CBot0DoF9RQdnmk5s4Y2IdJuLLzATp0b
X-Google-Smtp-Source: ABdhPJyIy+Vcmugxo/mynBGQxM8Vu186vQQNsqZ+mVkNm6ACTu6waowJKR5cdHuqjAMIZJpBpxzNN+gBcnoNdBPzBFs=
X-Received: by 2002:aca:1802:: with SMTP id h2mr1929299oih.146.1623947101422; Thu, 17 Jun 2021 09:25:01 -0700 (PDT)
MIME-Version: 1.0
References: <20210616180222.53DC311FBCDC@ary.qy> <6e76e4af-e592-0103-33dc-4cda6b129071@tana.it>
In-Reply-To: <6e76e4af-e592-0103-33dc-4cda6b129071@tana.it>
From: Douglas Foster <dougfoster.emailstandards@gmail.com>
Date: Thu, 17 Jun 2021 12:24:51 -0400
Message-ID: <CAH48Zfw+KEvAuZ6qPhFNhVdJg3TJR7ZBX-FCAMHezf22sbEs_g@mail.gmail.com>
To: IETF DMARC WG <dmarc@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000001d488905c4f8a6d7"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dmarc/Yv04RXJDeE-kPkfRlSuN_9RpqaM>
Subject: Re: [dmarc-ietf] Ticket #11 (and #112) - Proposed language
X-BeenThere: dmarc@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Domain-based Message Authentication, Reporting, and Compliance \(DMARC\)" <dmarc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dmarc>, <mailto:dmarc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dmarc/>
List-Post: <mailto:dmarc@ietf.org>
List-Help: <mailto:dmarc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dmarc>, <mailto:dmarc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 17 Jun 2021 16:25:08 -0000

Yes, The test should most certainly define how MX="." and SPF="-ALL"
affect the test.  This is why I said that the test needs a more complete
definition, but many were unwilling to even address that part of the
problem.

Even with those modifications, the test is only applicable for names that
are also used for SMTP MAILFROM.   This does not cover all names that are
used for FROM.

I infer that the A/AAAA component is included in the test definition
because these might indicate an implicit MX.   The use of implicit MX is
unnecessary, and I suspect unlikely to be in use by DMARC-publishing
domains.    It would a minor compliance step to require domain owners to
replace implicit MX with explicit MX, so that the test will accurately
indicate names that are used for SMTP purposes.

Doug Foster



On Thu, Jun 17, 2021 at 7:13 AM Alessandro Vesely <vesely@tana.it> wrote:

> On Wed 16/Jun/2021 20:02:21 +0200 John Levine wrote:
> > Let's close ticket #112 and stop.
>
>
> I agree that the definition given in the PSD is clear enough:
>
>     For DMARC purposes, a non-existent domain is a domain for which there
>     is an NXDOMAIN or NODATA response for A, AAAA, and MX records.  This
>     is a broader definition than that in [RFC8020].
>
> However, by that definition a domain with a Null MX [RFC7505] is an
> existent
> domain for DMARC purposes.  Perhaps this apparent contradiction could be
> noted
> by adding a sentence somewhere, for example:
>
>     Even though the bare existence of a domain does not entail that it can
> send
>     or receive email, the presence or absence of the relevant DNS RRs
> determines
>     which policy between sp= and np= is applicable.  If a DMARC record is
> found
>     for a domain that would be non-existent by the above definition, the p=
>     policy defined there is still the one to be applied.
>
> Would that add clarity?
>
>
> Best
> Ale
> --
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> _______________________________________________
> dmarc mailing list
> dmarc@ietf.org
> https://www.ietf.org/mailman/listinfo/dmarc
>