Re: [dmarc-ietf] Ticket #39 - remove p=quarantine

[Dotzero <[e-mail]>]

On Wed, Dec 2, 2020 at 5:35 PM Benny Lyne Amorsen <[e-mail]>
wrote:

> Dotzero <[e-mail]> writes:
>
> > p= DID NOT mistakenly choose to use the language of receiver
> > actions. p= represents the domain-owner request to the receiver as to
> > the disposition of messages which fail to validate. Any reading of
> > "concern" is supposition on the part of yourself or other self
> > appointed interpreters of the mind of the domain-owner or
> > administrator. [..] This is an interoperability standard, not a
> > seance.
>
> Am I particularly thin-skinned for considering this language
> inflammatory?
>

Your assertion that the drafters of DMARC mistakenly chose the language of
receivers is inflammatory. I don't remember you as part of the group that
developed DMARC. To make assertions regarding what people were thinking
when one wasn't present falls into the same realm as seances.

>
> The thing is, domain owners can request anything they want, but why
> should anyone listen? Particularly if they are rude about it instead of
> asking nicely.
>

The thing is, Validators and Receivers will do what they will do. It is
important to remember that DMARC only allows for "neutral" statements (no
policy) or negative assertions (quarantine or reject). It does not allow
for positive assertions (deliver my message to the inbox) nor does it allow
assertions for anything except the domain owners own domain) To the extent
that domain owner requests make sense they will be considered and used by
Validators and Receivers. To the extent they don't, they won't be used. It
really is that simple. Would any Validator or Receiver take seriously a
DMARC policy assertion of p=reject based on an SPF record using  *0.0.0.0/0*
-all? Doubtful.

>
> When someone brings up a concern they have and explain why it is of
> benefit to either the recipient or the community to take certain
> actions, that will likely be heard. However, unexplained edicts are
> unlikely to be taken very seriously.
>

How seriously should someone's "concern" be taken when it is phrased as an
assertion of knowing what was in the minds of people when that someone
wasn't present. That someone might have phrased it as a question rather
than a declarative. As far as unexplained "edicts", quite a few receivers
use SPF/DKIM/DMARC in their calculus as to how they handle mail destined
for their systems. So there is clearly some perceived benefit or they
wouldn't be doing so.

Michael Hammer