Re: [dmarc-ietf] DMARC-Compliant Mailing Lists

[Baptiste Carvello <[e-mail]>]

Hi,

Le 17/10/2021 à 19:43, Alessandro Vesely a écrit :
> 
> There is no abuse.  MLMs act as submitters.  Setting From: should be a
> must.

This all habit of telling other actors what they should or must do has
to stop. This hubris is the original sin of Yahoo, which started all the
trouble.

In a sound interoperation situation, each actor has a bit of wiggle room
to assess the situation in their own area of responsibility according to
their worldview. Which means for example:

* originating domains are free to choose their preferred treatment of
DMARC FAILing messages, while remembering to be careful what they wish…

* mailing lists can send as their own domain if or when they act as a
proper editor, but can also keep the original From field when they act
as a technical helper. And they don't need to second-guess evaluators.

* evaluators make the final delivery decision based on the originating
domain's wishes, but most of all based on their assessment of their
users' interest. And yes, they can rewrite whichever headers they feel
like, they control their own UX.

Corollary to this freedom, there must be incentives to keep each actor
accountable. This is where the problem currently lies: the originating
domains take no responsibility at all for their choices, which is why
Yahoo could get away so easily with their disruptive move.

That's why I suggest that REJECTed messages should be silently discarded
and thus possibly lost, which makes all actors equally bear the
consequences, instead of bounced, which disproportionately punishes the
mailing list operators.

If it decreases deliverability in the short term, so be it: making all
actors accountable is a prerequisite for any consensual solution in the
long term.

Cheers,
Baptiste