IETF Logo Mail Archive

[dmarc-ietf] Re: Review of draft-ietf-dmarc-arc-to-historic

Benny Pedersen <me@junc.eu> Mon, 13 July 2026 18:15 UTC

Return-Path: <me@junc.eu>
X-Original-To: dmarc@mail2.ietf.org
Delivered-To: dmarc@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 758251160232C for <dmarc@mail2.ietf.org>; Mon, 13 Jul 2026 11:15:48 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1783966548; bh=2ontAb6uQc6Ok/nbh2lweG6oqGzDHf9dt/vc22qSr9M=; h=Date:From:To:Subject:In-Reply-To:References; b=xBNrQC38Dr+TADBs99AjyJIz2UfUYvEcYaXXFtxssR6P0z2l7mzM++7nxc1qOZBXT lra3Ks7H1Vd5UE2W9vqDxH1JH5LLhebhWx24oHZyNKUxxA5ykKjWfrMVyxyM7zq4U+ MxmvlW+d7fPGKNRxBDGxSL+cM93Zzdx8X+h7ibLs=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -4.399
X-Spam-Level:
X-Spam-Status: No, score=-4.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=junc.eu
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5SzgtHoOo8XY for <dmarc@mail2.ietf.org>; Mon, 13 Jul 2026 11:15:41 -0700 (PDT)
Received: from mx.junc.eu (mx.junc.eu [172.104.150.56]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 403F511602311 for <dmarc@ietf.org>; Mon, 13 Jul 2026 11:15:41 -0700 (PDT)
Received: from localhost (localhost.junc.eu [127.0.0.1]) by mx.junc.eu (Postfix) with ESMTP id 0DAB28016F for <dmarc@ietf.org>; Mon, 13 Jul 2026 20:15:26 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=junc.eu; h= content-transfer-encoding:content-type:content-type:organization :message-id:references:in-reply-to:subject:subject:from:from :date:date:mime-version:received:received; s=default; t= 1783966525; x=1784830526; bh=2ontAb6uQc6Ok/nbh2lweG6oqGzDHf9dt/v c22qSr9M=; b=HlujNFi/O4gb+tVZHRK6duBG2lcGBZ6hVGG5KVbvFvs/2UIiTtw feMlqCtqRz+z927Ip9GXgRCGPEqgmurod/F81r+vvxS7kTGr77P1KOQsBwn0F0ls uAodoY2kI++68ENIAKUDiDfnBYMDPtKFYzn1mebsPnc9JAqidIHBcpX3njWcG7KT HCfoenzgKkfGBXohXXm40DlOwOZ+hEv/Mk/DbCp1J+ZwAmFIjKICweX0tRmWNjph LMhay8gWwbXKjs+1fNpcfUzPKqUxD/Ae9ZFtYQuc8pzoJIsrQdTOuKPGXMso12yq hXsWbuQ35CZTRhSohIdiBbEHPpFaHvE2vkA==
X-Virus-Scanned: amavis at mx.junc.eu
Received: from mx.junc.eu ([127.0.0.1]) by localhost (mx.junc.eu [127.0.0.1]) (amavis, port 10023) with LMTP id 9JwvIPrSUvJv for <dmarc@ietf.org>; Mon, 13 Jul 2026 20:15:25 +0200 (CEST)
Received: from localhost.junc.eu (localhost.junc.eu [127.0.0.1]) by mx.junc.eu (Postfix) with ESMTPSA id 6C0747FA81 for <dmarc@ietf.org>; Mon, 13 Jul 2026 20:15:25 +0200 (CEST)
MIME-Version: 1.0
Date: Mon, 13 Jul 2026 20:15:25 +0200
From: Benny Pedersen <me@junc.eu>
To: dmarc@ietf.org
In-Reply-To: <b29f2b01-8a53-41cf-a6fe-96365d332c47@tana.it>
References: <27205.4140.707940.589907@fireball.acr.fi> <CAL0qLwYRBCs8hg=EZ-dg1VXFgQA7q6+X5kpqWz_AkpgwSG3WmA@mail.gmail.com> <27206.31399.682572.492683@fireball.acr.fi> <CAL0qLwZqgTC5jhx+xxfPh6_0MKWNf6G-hs62a=wqp7=chR_3Vg@mail.gmail.com> <CAH48Zfy-wE_KcLq+6DhM19f5tgcksHbepBRMWeCNuXYKgCzFKA@mail.gmail.com> <27215.46247.267513.270087@fireball.acr.fi> <CAH48ZfxC81X097sdSkPgzRC6bSKVdqV4=VAzwoX173nRhG4+MQ@mail.gmail.com> <b29f2b01-8a53-41cf-a6fe-96365d332c47@tana.it>
Message-ID: <4e57dc11a399cb07e3ab09743351e166@junc.eu>
X-Sender: me@junc.eu
Organization: junc.eu
Content-Type: text/plain; charset="US-ASCII"; format="flowed"
Content-Transfer-Encoding: 7bit
Message-ID-Hash: 4YBPHLWOSKD5SASP67TNOI4A6AFEVY4L
X-Message-ID-Hash: 4YBPHLWOSKD5SASP67TNOI4A6AFEVY4L
X-MailFrom: me@junc.eu
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-dmarc.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [dmarc-ietf] Re: Review of draft-ietf-dmarc-arc-to-historic
List-Id: "Domain-based Message Authentication, Reporting, and Compliance (DMARC)" <dmarc.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dmarc/k7yWxStBn1IBmNcWnRv4mCQ-E5s>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dmarc>
List-Help: <mailto:dmarc-request@ietf.org?subject=help>
List-Owner: <mailto:dmarc-owner@ietf.org>
List-Post: <mailto:dmarc@ietf.org>
List-Subscribe: <mailto:dmarc-join@ietf.org>
List-Unsubscribe: <mailto:dmarc-leave@ietf.org>

Alessandro Vesely skrev den 2026-07-13 18:45:

> Incoming messages with a broken chain should be rejected.  Then, only 
> the top ARC set can be trusted/ whitelisted.  Iki.fi can in turn 
> whitelist forwarders it trusts, which appear in the top ARC set of 
> inbound traffic.  (Does it have its own whitelisting mechanism?)

do not reject based on dkim, never do this, and do skip maillist ips as 
trusted_network in spamassassin friends and co, here is trusted_network 
the maillist sender ip, then in spamassassin authres it can safely use 
arc results from original senders dkim / spf / dmarc results

atleast this was the plan for arc

do not reject maillists, it seems common mistakes who do this

v2.46.0 | Report a Bug | By Email | System Status