Re: [dmarc-ietf] Which DKIM(s) should be reported? (Ticket #38)

Currently, my filter only evaluates signatures that are relevant to From
alignment, and stops after the first success.   For that decision process,
all that I need returned (and stored) is a Pass/Fail result; I don't need
the details of the algorithm evaluated.  Any additional information
collection is for the benefit of someone else, not the needs of my own
organization.

The burden of data collection is proportionate  to the amount of data
collected.  DMARC reporting is a courtesy service from the data collector
to the domain owner.  Each effort to increase the precision of the data may
reduce the number of domains willing to provide that information.

I suggest that we need report consumers in this group to discuss how they
use the current data and the proposed additions to that data, so that a
cost/benefit assessment can be made.   At least some of that justification
should be included in the final document, since one purpose of that
document will be to convince non-reporting entities to begin sending
reports.

Doug Foster

On Sun, Jan 24, 2021 at 7:25 PM Brotman, Alex <Alex_Brotman=
40comcast.com@dmarc.ietf.org> wrote:

> Hello folks,
>
> Some time ago, an issue[1] was brought to the list where which DKIM(s)
> being reported is not clear in RFC7489 [2].  There was a short discussion,
> though no clear resolution before conversation trailed off.  It seems like
> there were points that may need to be discussed.  One was whether the
> reporting SHOULD report all signatures, regardless of alignment or
> validity, or perhaps just the one that aligns (if there is one).  There was
> also another question if there should be a limit to the number of
> signatures reported so that it remains sane.
>
> We'd like to try to get this resolved within about two weeks.  Thank you
> for your feedback.
>
> 1:
> https://mailarchive.ietf.org/arch/msg/dmarc/9-V596yl2BBaUzCNaDZB1Tg1s4c/
> 2: https://tools.ietf.org/html/rfc7489#section-7.2
>
> --
> Alex Brotman
> Sr. Engineer, Anti-Abuse & Messaging Policy
> Comcast
>
> _______________________________________________
> dmarc mailing list
> dmarc@ietf.org
> https://www.ietf.org/mailman/listinfo/dmarc
>