Re: [dmarc-ietf] PSD Privacy and Private Registries

Emil Gustafsson <emgu@google.com> Fri, 10 February 2023 00:15 UTC

Return-Path: <emgu@google.com>
X-Original-To: dmarc@ietfa.amsl.com
Delivered-To: dmarc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 797D8C17EA6A for <dmarc@ietfa.amsl.com>; Thu, 9 Feb 2023 16:15:54 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -17.596
X-Spam-Level:
X-Spam-Status: No, score=-17.596 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZdOhn4ZES21l for <dmarc@ietfa.amsl.com>; Thu, 9 Feb 2023 16:15:50 -0800 (PST)
Received: from mail-yw1-x1129.google.com (mail-yw1-x1129.google.com [IPv6:2607:f8b0:4864:20::1129]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AF6BEC17D685 for <dmarc@ietf.org>; Thu, 9 Feb 2023 16:15:50 -0800 (PST)
Received: by mail-yw1-x1129.google.com with SMTP id 00721157ae682-501c3a414acso47646587b3.7 for <dmarc@ietf.org>; Thu, 09 Feb 2023 16:15:50 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20210112; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=FsyZ+lNPqtwmtQIqcYLqteLFtSFYwWc7i7ypjmHtpbA=; b=O5VGK2Nkehsjrve8Y4WlKOTXHBQJLu66sKZdXNgRcxnwL1pcWi/RqsDA4Fxz8R/vmM t12euCYhumfbwXZ8Kbv/3KVRKcl3Be8lhkoyrwueMIw3VyZbjGmbAgc5Y/lInGTBCV5e /qsxUazH+wYLxchoSoQ8Y6QRTRWvCVWDhUFz081KCoH2xOilXTObNOrLwiiAvD3cEC99 +DFcSKzQP8OutBd7ZhVRUdWoEsPmX/o3qG97fD5t891d5KZMCnrNaoLS36hIPJpVpH51 sSJxB2EdSNqcJu74fqQm4J/bkPd3XtvPInzVtYlEq6KM1YI5OJPaWLRSvqVUx+WEsPsk nh6A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=FsyZ+lNPqtwmtQIqcYLqteLFtSFYwWc7i7ypjmHtpbA=; b=pm94IGQ3m84OPasYB6C8AJUB9YK+iL+gHHUsEXSzDnJtbLzC/5QKb7BdmRMvKyJV+M nPC2qbVebW0F9f4Vv/mt97BgWCj+PE1DzbdPu16LmP9/fPywC4/kKE3gV5i/ytA6nlqq uxsapq7cJ9lLiJHvljSnU4GHe0X2kceMUINxEXyZ9F2kRalgIIus39gJ3IrcjfUq38DI dHpP5AIT9PsBnq2oQ60BzecBSOoogpCPjfl63h2Br4IirfbZTvvBrvGTOS8YMQpHMs5H KnVQtT3Fi2Fzx3DFP2wCfSM3Xa7471dkGJOX73STDESb1oRKIsScK6hAttF1vhrNIhqW 6yFg==
X-Gm-Message-State: AO0yUKUJtg2+MiniaWugfmAMEzqgnm+C5/b8aTwA1icx4AAPbaVniD6d SIPgIKkNigYL349RYhParhyFaXKAxlaisNTyMbuqUw==
X-Google-Smtp-Source: AK7set+LkxCiQUPYjm35zyYuyszzD0L4mwvY+QbYQdEJtmFGQbk0ECRZntGN/fdjgKSYfMFIjNQcXoWWUXY5Iem7p1U=
X-Received: by 2002:a81:4ac6:0:b0:527:9d23:f6d7 with SMTP id x189-20020a814ac6000000b005279d23f6d7mr1349184ywa.48.1675988149397; Thu, 09 Feb 2023 16:15:49 -0800 (PST)
MIME-Version: 1.0
References: <CAH48ZfyW9zz=ACFhrDuy1DRKHfej3TLc+r0jNZQzNEQqVBftmw@mail.gmail.com>
In-Reply-To: <CAH48ZfyW9zz=ACFhrDuy1DRKHfej3TLc+r0jNZQzNEQqVBftmw@mail.gmail.com>
From: Emil Gustafsson <emgu@google.com>
Date: Thu, 09 Feb 2023 17:15:34 -0700
Message-ID: <CABZJ8knFFRCi5Q8gWdLxuu2Nv23-p1QZZhe2R9xRowRXPzf78Q@mail.gmail.com>
To: Douglas Foster <dougfoster.emailstandards@gmail.com>
Cc: IETF DMARC WG <dmarc@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000004b659605f44d6678"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dmarc/pWBea3vG9BfHMB239IOL5C543p8>
Subject: Re: [dmarc-ietf] PSD Privacy and Private Registries
X-BeenThere: dmarc@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Domain-based Message Authentication, Reporting, and Compliance \(DMARC\)" <dmarc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dmarc>, <mailto:dmarc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dmarc/>
List-Post: <mailto:dmarc@ietf.org>
List-Help: <mailto:dmarc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dmarc>, <mailto:dmarc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 10 Feb 2023 00:15:54 -0000

That's what I'm thinking too. I think the key here is that it is not easy
for a mailbox provider to know if the privacy aspect is addressed in the
contract with their customer or not. Nor if the PSO demands all their
customers to have their own DMARC or not. I think that is what it boils
down to.

/E

On Thu, Feb 9, 2023 at 5:08 AM Douglas Foster <
dougfoster.emailstandards@gmail.com> wrote:

> Recently, John observed that if a PSO publishes PSD=Y, it probably has a
> contract with member organizations.
>
> The privacy considerations are minimized by the contract, and it becomes
> unlikely that a member domain will not have an organization policy, so the
> PSD=Y clause will rarely be invoked.
>
> On the other hand, tree walk hopes that private registries will publish a
> PSD=Y policy.   The privacy considerations seem much more significant here,
> because the relationship between the private registry and its clients is
> likely to be loose and the affinity between clients is also likely to be
> loose.
> _______________________________________________
> dmarc mailing list
> dmarc@ietf.org
> https://www.ietf.org/mailman/listinfo/dmarc
>