IETF Logo Mail Archive

Re: [dmarc-ietf] Sender vs From Addresses

"Kurt Andersen (b)" <kboth@drkurt.com> Wed, 24 March 2021 20:27 UTC

Return-Path: <kurta@drkurt.com>
X-Original-To: dmarc@ietfa.amsl.com
Delivered-To: dmarc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 31CFE3A3577 for <dmarc@ietfa.amsl.com>; Wed, 24 Mar 2021 13:27:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=drkurt.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PG94Bv5EfOWU for <dmarc@ietfa.amsl.com>; Wed, 24 Mar 2021 13:27:51 -0700 (PDT)
Received: from mail-io1-xd31.google.com (mail-io1-xd31.google.com [IPv6:2607:f8b0:4864:20::d31]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 21CAE3A357C for <dmarc@ietf.org>; Wed, 24 Mar 2021 13:27:51 -0700 (PDT)
Received: by mail-io1-xd31.google.com with SMTP id v26so22921183iox.11 for <dmarc@ietf.org>; Wed, 24 Mar 2021 13:27:51 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=drkurt.com; s=20130612; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=oSklOhqxK7BPNpyXSgDMJWiUSSVydK8bPGowN6dQf7o=; b=fyBEHfzlSlD3keOtcnu89rlppiOB1clXrjU/u0gVJAf994jRDktId64SXH77DTS8IO srby519/GijN32ZSbggCl0U6kXhXKL47vW5SygLQFUhR8WWGp4+pZOHnSVsxIG0yv9tN VHkCUmlfS1Rwh2ayR/8FX2nWN57abWPeHnyck=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=oSklOhqxK7BPNpyXSgDMJWiUSSVydK8bPGowN6dQf7o=; b=ZUH6Qj9T6BKJkLdSp1dwlI69W7gu88HXv5SS0sWF7KmHkusbslTW8opeo/QqUbrzXM fs6uhx8ec/dVw33GkfK1cG/PqbTINy+J0twlPkJIAqNtpLWcOKBD/HRcSJOyzQT0FTBo NgvJgtiByEdk1KsGcK3QTMxBV+mWbDFacoPjeqDnXj75GvvQquF7Omfie8DWlYUamdLt M/IXDnL0M6Svz7vkn9BP+nZzs4r08rlI1X7xiYTei70cBdBeTIierkHH5qH5ZiCv6YKC bQVtd7kqBUJdveHpn7pV1RNpxmSR2JXlb4mbEKtkqNUfBdyXvJ+fuosLYfN3BI9Tvf2u gNPA==
X-Gm-Message-State: AOAM531lpxmxa0JEuBqKvFGO+u/wAp7Xrt+PKKPv/xRxOR/ZBNWpS2DC BOxvA5kFWe15qdHjWH624/oRIDd4MuXwGW1r/0AqYNNjWOk=
X-Google-Smtp-Source: ABdhPJy2Pw563HoFgU7H9zXdzeWb6NCPnYS9LZM82r3e6UuWnzfDNsNTZq8F0AAurTZKnXYUPXR3G+D0DKq4IzEOhAo=
X-Received: by 2002:a05:6638:1a6:: with SMTP id b6mr4513962jaq.116.1616617669398; Wed, 24 Mar 2021 13:27:49 -0700 (PDT)
MIME-Version: 1.0
References: <F1E2D8D7-9978-4C4B-9FD7-AB6428D12789@contoso.com> <20210324202058.91E777134D1B@ary.qy>
In-Reply-To: <20210324202058.91E777134D1B@ary.qy>
From: "Kurt Andersen (b)" <kboth@drkurt.com>
Date: Wed, 24 Mar 2021 13:27:38 -0700
Message-ID: <CABuGu1ovwwwwZALDOed74nBu1gOHcom8W+UDKC2GdWiEE_7yKw@mail.gmail.com>
To: John Levine <johnl@taugh.com>
Cc: "dmarc@ietf.org" <dmarc@ietf.org>, gelliot@mimecast.com
Content-Type: multipart/alternative; boundary="000000000000ec2cc405be4e2157"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dmarc/fxOpHJP-bMJFfsGLv6Lp1sKvofc>
Subject: Re: [dmarc-ietf] Sender vs From Addresses
X-BeenThere: dmarc@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Domain-based Message Authentication, Reporting, and Compliance \(DMARC\)" <dmarc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dmarc>, <mailto:dmarc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dmarc/>
List-Post: <mailto:dmarc@ietf.org>
List-Help: <mailto:dmarc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dmarc>, <mailto:dmarc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 24 Mar 2021 20:27:56 -0000

On Wed, Mar 24, 2021 at 1:21 PM John Levine <johnl@taugh.com> wrote:

> It appears that Gren Elliot  <gelliot@mimecast.com> said:
> >For better or worse, there is long established practice in the
> Calendaring community when implementing iMIP (rfc6047) when an
> >assistant is working on behalf of a manager for the manager’s email
> address to populate the “From:” header and the
> >assistant’s email address to populate the “Sender:” header.
>
> DMARC only looks at the domain part of the From header.  How often do the
> manager and assistant have e-mail addresses that
> are not in the same domain?
>

John,

This goes back to your Roman Empire scenario. It's not necessarily common,
but it isn't unheard of for domain mismatches especially in the case of
acquisitions or other corporate structuring changes.

--Kurt

v2.23.0 | Report a Bug | By Email