Re: [dmarc-ietf] WGLC review of draft-ietf-dmarc-dmarcbis-30

Seth Blank <seth@valimail.com> Sun, 31 March 2024 20:27 UTC

Return-Path: <seth@valimail.com>
X-Original-To: dmarc@ietfa.amsl.com
Delivered-To: dmarc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E4D93C14F69C for <dmarc@ietfa.amsl.com>; Sun, 31 Mar 2024 13:27:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.096
X-Spam-Level:
X-Spam-Status: No, score=-2.096 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=valimail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wmHUox68Ow44 for <dmarc@ietfa.amsl.com>; Sun, 31 Mar 2024 13:27:32 -0700 (PDT)
Received: from mail-il1-x135.google.com (mail-il1-x135.google.com [IPv6:2607:f8b0:4864:20::135]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F09EFC14F698 for <dmarc@ietf.org>; Sun, 31 Mar 2024 13:27:32 -0700 (PDT)
Received: by mail-il1-x135.google.com with SMTP id e9e14a558f8ab-368aa96233bso15660865ab.3 for <dmarc@ietf.org>; Sun, 31 Mar 2024 13:27:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=valimail.com; s=google2048; t=1711916852; x=1712521652; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=yagQv/1v99dhy6dAciHqqXeqZoXXQTnB9+uunBcKOKQ=; b=J9tRabuiz5O+ejlc+OmXLEyUJYknUOEgZGo5YvxZZ0t4rkWCjeS5Y+DRGe+K4a+uEx xd8KGe1BX+ZeK058DeZ91lysErXKHBxwba75Gl5/5wsmXgtUsx0EroKpE8YSecfD5BL7 JFSiTB0VawZUo65lv1WCW3IUXijnkMyX6vgNKN9gGLrZotNmw4OkdSX3UoOKYsncfgN8 e9lEYhvtPxQjmn2f8PmoHhwImcxvMObsbpgmPYb/kC8QeoL2e7Ddy1tk7XWtyvb8IeQW BxXCNq2LxdGpzv4dd1K79hDj6k2gOabq4/vZOAuKV1Ffg48KK73xz4JJKjb1KEfbOZUt JubA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1711916852; x=1712521652; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=yagQv/1v99dhy6dAciHqqXeqZoXXQTnB9+uunBcKOKQ=; b=v30q6/GhA3AsmALwLFqDyIjSmsE8mEEf0Dbq038BGAo0U5k9WSc9208R4ArMtmtukv 2VyY8UmytF2ZR6SzIdL+pO3nq6ekUviR2a1U3dlqILb1XIOg25PIxIzhAbdIZ3cwm1k3 ITfK2Q9XFQEMAliNAWCyw3Nml7TVh/qXOJF54LsniD4uAA1zKrIUvU2BNN+76U1Q6kjV uy8EIAYrC5Ze9jNltT+IfMaKis4D95atIrTfXrOtXNPi8TnemFsC8BTdW43PwIBoQAuo Cfw/pVVG0ymtbqbR0KzHdJn0O5KmuR4bdPl/cDlc/KZSit4RDru90hdkGDndweQbFaRv MCPA==
X-Gm-Message-State: AOJu0Yx7g9n5/3oJFDGPdPf7tNoG4ZQm+XlnSj0tb2pI5GR6Y7qfhjuD jm0/GYVUD1hBskX2HPnkXZ02Il2TF35X1iP8Ru4W3nH8pWkcoinXWQ802hg2PC8ZCoQpOSAcZmK jL2FAEmNMZ7LgLsRqHtMAYsK3MV6JspmgEwPE9/Spl/7M5mRB
X-Google-Smtp-Source: AGHT+IFfMC3LG3p51pUPr0FvAF9UEDmzCCMQNiT0h/dzDCOIh4EwAuDM09OvcuZV/WdSmZHnLE6DW4sq7dwrvMWcI4U=
X-Received: by 2002:a05:6e02:33a1:b0:368:9672:a19b with SMTP id bn33-20020a056e0233a100b003689672a19bmr10299332ilb.16.1711916852145; Sun, 31 Mar 2024 13:27:32 -0700 (PDT)
MIME-Version: 1.0
References: <F5158C76-BD86-4540-965D-F0D8664B6CD9@bluepopcorn.net> <85761761-ad6a-2a19-da82-344ed52c2391@iecc.com> <B4365E6E-00DF-425E-9974-6EE1DE057319@bluepopcorn.net> <4d462513-6c1a-c1da-d62c-68d41bba6465@iecc.com> <CEC36155-584E-46FD-AE3E-AB511CBD843F@bluepopcorn.net> <5d153d2c-a2c6-097d-a249-27e95ff9323d@iecc.com> <A9A1C60A-D49B-4519-976C-133B2470F59C@kitterman.com> <CAOZAAfMo9AN4-YeFN+1P9m0SHtZYiAs45_KRRq6Kd6FpRpbxbw@mail.gmail.com> <56E1CDC5-3185-4EEB-90B7-6EA10183CF18@kitterman.com>
In-Reply-To: <56E1CDC5-3185-4EEB-90B7-6EA10183CF18@kitterman.com>
From: Seth Blank <seth@valimail.com>
Date: Sun, 31 Mar 2024 16:27:21 -0400
Message-ID: <CAOZAAfMTv87KUWJwQdKRgW2M33k275ZgEoc-KcT8vOWvATv2mA@mail.gmail.com>
To: Scott Kitterman <sklist@kitterman.com>
Cc: dmarc@ietf.org
Content-Type: multipart/alternative; boundary="000000000000db93430614fab35a"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dmarc/aFc9hpUILoPWlyuWv8FSjXs4vOg>
Subject: Re: [dmarc-ietf] WGLC review of draft-ietf-dmarc-dmarcbis-30
X-BeenThere: dmarc@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Domain-based Message Authentication, Reporting, and Compliance \(DMARC\)" <dmarc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dmarc>, <mailto:dmarc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dmarc/>
List-Post: <mailto:dmarc@ietf.org>
List-Help: <mailto:dmarc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dmarc>, <mailto:dmarc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 31 Mar 2024 20:27:37 -0000

I’m saying, as an individual, that there was a thread where we discussed a
new N for the tree walk. There was appetite, but no new N was settled on.

Given that prior appetite but no conclusion, I believe as part of WGLC we
should choose that N. I proposed what I think would work. John Levine
chimed in that he thought that was reasonable.

Do you have operational experience as a report consumer that this would be
a mistake and more complicated organizations should not be able to receive
reports?

Seth Blank | Chief Technology Officer
Email: seth@valimail.com


This email and all data transmitted with it contains confidential and/or
proprietary information intended solely for the use of individual(s)
authorized to receive it. If you are not an intended and authorized
recipient you are hereby notified of any use, disclosure, copying or
distribution of the information included in this transmission is prohibited
and may be unlawful. Please immediately notify the sender by replying to
this email and then delete it from your system.



On Sun, Mar 31, 2024 at 16:19 Scott Kitterman <sklist@kitterman.com> wrote:

>
>
> On March 31, 2024 7:49:08 PM UTC, Seth Blank <seth=
> 40valimail.com@dmarc.ietf.org> wrote:
> >On Sun, Mar 31, 2024 at 1:40 PM Scott Kitterman <sklist@kitterman.com>
> >wrote:
> >
> >>
> >>
> >> On March 31, 2024 5:32:13 PM UTC, "John R. Levine" <johnl@iecc.com>
> wrote:
> >> >>>> I’m probably being pedantic here: is “gov” a domain?
> >> >>> Yup, it's a domain.
> >> >> I stand corrected on that.
> >> >
> >> >Anything that meets the DNS spec is a domain namen, e.g.,
> >> argle.bargle.parp is a domain name.  If and how particular names might
> be
> >> resolved is a topic to which the IETF and ICANN have given a certain
> amount
> >> of attention.
> >> >
> >> >> Might be worth bumping up. Examples:
> >> >>
> >> >> execute-api.cn-north-1.amazonaws.com.cn
> >> >> cn-northwest-1.eb.amazonaws.com.cn
> >> >>
> >> >> (Amazon seems to have most of the really long ones)
> >> >
> >> >None of those Amazon ones are used for mail so they're irrelevant to
> >> DMARC, but see Seth's recent message.  He says he's seen mail domains 8
> >> deep.
> >>
> >> I need to write a response to that, but he's made the claim before and
> >> they are from deep within a PSD.  The idea that we need to change the
> >> number as a result got no traction.
> >>
> >
> >That's not true. There was not consensus on a new N, but there was also
> not
> >resistance to increasing it. Multiple operators have confidential
> examples,
> >and I also have some.
> >
> >Remember, the issue is with *reporting* discovery and not org domain
> >lookup. Those that collect reports see the issue, but cannot break client
> >confidentiality to share the examples.
> >
> That's not my recollection.
>
> Are you saying as co-chair that any issue for which there was not a formal
> consensus call is still open for discussion?
>
> Scott K
>
> _______________________________________________
> dmarc mailing list
> dmarc@ietf.org
> https://www.ietf.org/mailman/listinfo/dmarc
>