Re: [dmarc-ietf] Aggregate Reporting - "Not Evaluated" result

"Murray S. Kucherawy" <superuser@gmail.com> Mon, 03 October 2022 16:01 UTC

Return-Path: <superuser@gmail.com>
X-Original-To: dmarc@ietfa.amsl.com
Delivered-To: dmarc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5B950C1524BD for <dmarc@ietfa.amsl.com>; Mon, 3 Oct 2022 09:01:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.106
X-Spam-Level:
X-Spam-Status: No, score=-2.106 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SIQpNFf3FMsy for <dmarc@ietfa.amsl.com>; Mon, 3 Oct 2022 09:01:19 -0700 (PDT)
Received: from mail-ed1-x52f.google.com (mail-ed1-x52f.google.com [IPv6:2a00:1450:4864:20::52f]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B2749C1524BB for <dmarc@ietf.org>; Mon, 3 Oct 2022 09:01:19 -0700 (PDT)
Received: by mail-ed1-x52f.google.com with SMTP id u21so11033638edi.9 for <dmarc@ietf.org>; Mon, 03 Oct 2022 09:01:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date; bh=rksI47Rr20ICv6vi2NSxMXRtJaK019RVNEYxU11r96I=; b=W+ajSIQWQ4Wup59GSJr9URcb6krnGDUBD9mAckZTUK+Tb5jh9pLY7rUVv9qe5Iv8bc SGZkOJJ/O4IuwNmqLmB+5ma5nxqXC0y66M4QyI+WA3WUXjdoMgBiEN4ghhaiZ5MtPn/+ jALGzXytFWySosLQRDNst8o8mQSvg6TxoEVG7U46+igqjwZ9hjPA0AddfrXWL4aCIxhm nbRRKVbGSnEiCIZTdPK86YiOzs0V6je9IzHumXLkNQzUdZz2+Q2DCJ0z/EA5/+djeigf zCbe5oeP+GHUM4ycMMUlt2+GmRglPnGW+12gXzWIgy1j+DJGXtYJwC4Xx/fu0zTeZwmY iovQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date; bh=rksI47Rr20ICv6vi2NSxMXRtJaK019RVNEYxU11r96I=; b=GgnD2Wp8Uunnd+rHcGfzjUoCNhSnLPIDGhEP08scJ5y+HIXD/nL5PO+ZYK9VgeBtTO FslFQ0H/idxPBTkMdgrlNwYD94v7FmEHrpybn2FZbtRDyYdQKlsL7PCJFsvQoOhvA9Mw +DIvH4Wcff1FsQBEHU4k91VZkygN1bpJD7Gx7DlAuLlsNB6y4v6BifqoT4RFQ3h5Y9dX qFfcaBRJYjPxVy+dX+4YJ1mTP+G7y1PmdkD7NfGVgNPIUYXaeZaLYoxmhqCsMnh69Mxv u+2nCTEbrrd6/IrxCXKs7BQ6hLIyDjrFWSRL9MY+RPiaoWZSOqH6K7mb8v526dX5SOnS PFzw==
X-Gm-Message-State: ACrzQf1/XVkeWF8ZqZBuw/k6FrQH8fxfMJLFj9a4aefcTLMEPcKiHMnb qMEU0A/gLyjtwCltRW3ltJwKU2dEoK4PiiQW92g=
X-Google-Smtp-Source: AMsMyM46qADhnmcvsiUmd+cKIK3tKNlSirYD2emTAj2Tld6VXjvgnpqxcXBj6OPXnA7rqjm7sss7qZwJ+5XMUl+JfvE=
X-Received: by 2002:a05:6402:11cc:b0:458:f610:8404 with SMTP id j12-20020a05640211cc00b00458f6108404mr5398388edw.75.1664812877858; Mon, 03 Oct 2022 09:01:17 -0700 (PDT)
MIME-Version: 1.0
References: <165046214335.10055.16398898629460366752@ietfa.amsl.com> <CAH48ZfxZOq68=P-Qxjvjk1c8PxWAWDvaBPPQcb4DWmd6cL=u4Q@mail.gmail.com> <CAJ4XoYen6n06L1UBqzu9nr2jCC7v_-GOAdJXMzCks6d-AaKqUA@mail.gmail.com> <CAH48ZfzVt=+yoj280VxL_SV+YM4C7eqMWhL=41YpVybaPmLcLg@mail.gmail.com> <CAHej_8mgKjpo6DDbOS9bBdTarThKOa9F55QBtrM6G-oq1YfX+w@mail.gmail.com> <CAL0qLwYjYY4OvShqACWPz0vdJcAubdU1csFFVSkqzsReZSZxuw@mail.gmail.com> <MN2PR11MB43514940B87730CC9D476AACF75B9@MN2PR11MB4351.namprd11.prod.outlook.com>
In-Reply-To: <MN2PR11MB43514940B87730CC9D476AACF75B9@MN2PR11MB4351.namprd11.prod.outlook.com>
From: "Murray S. Kucherawy" <superuser@gmail.com>
Date: Mon, 03 Oct 2022 12:01:06 -0400
Message-ID: <CAL0qLwb=1CZN6s2QzWJGFeO3=iPWZ-eS=7hvi4B6jhuh+hLJ0w@mail.gmail.com>
To: "Brotman, Alex" <Alex_Brotman@comcast.com>
Cc: Todd Herr <todd.herr=40valimail.com@dmarc.ietf.org>, Douglas Foster <dougfoster.emailstandards@gmail.com>, IETF DMARC WG <dmarc@ietf.org>
Content-Type: multipart/alternative; boundary="00000000000033cae005ea237446"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dmarc/l0OS4_kPgSvhP_E2djmNhLIpIBI>
Subject: Re: [dmarc-ietf] Aggregate Reporting - "Not Evaluated" result
X-BeenThere: dmarc@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Domain-based Message Authentication, Reporting, and Compliance \(DMARC\)" <dmarc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dmarc>, <mailto:dmarc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dmarc/>
List-Post: <mailto:dmarc@ietf.org>
List-Help: <mailto:dmarc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dmarc>, <mailto:dmarc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 03 Oct 2022 16:01:21 -0000

On Mon, Oct 3, 2022 at 10:26 AM Brotman, Alex <Alex_Brotman@comcast.com>
wrote:

> So we would likely need a section in the core document with a SHOULD for
> evaluation (if it’s not already there), and then a section in the aggregate
> reporting for a MUST for reporting on evaluated information (if they choose
> to send reports at all), correct?
>

I'm having a hard time coming up with a crisp answer to this.

>From a security perspective, failing to do either of these doesn't create
any sort of security exposure, so neither is justified.

>From an operations perspective, you could argue that doing both is
necessary for robustness and operator sanity (i.e., the complete picture is
recorded which enables debugging), so both are justified.

>From the actual protocol standpoint, the filtering part of DMARC operates
just fine if you make the shortcut Doug is proposing, so the first SHOULD
is probably apt but the MUST is moot because it doesn't change
interoperability.

I guess it depends on what we think the priority is.

-MSK

>