Re: [dmarc-ietf] Signaling MLMs

Dotzero <dotzero@gmail.com> Thu, 13 April 2023 15:58 UTC

Return-Path: <dotzero@gmail.com>
X-Original-To: dmarc@ietfa.amsl.com
Delivered-To: dmarc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 74DC4C14F73F for <dmarc@ietfa.amsl.com>; Thu, 13 Apr 2023 08:58:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OMBi9wR9v3If for <dmarc@ietfa.amsl.com>; Thu, 13 Apr 2023 08:58:08 -0700 (PDT)
Received: from mail-ua1-x92c.google.com (mail-ua1-x92c.google.com [IPv6:2607:f8b0:4864:20::92c]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AF973C14F736 for <dmarc@ietf.org>; Thu, 13 Apr 2023 08:58:07 -0700 (PDT)
Received: by mail-ua1-x92c.google.com with SMTP id f32so10737343uad.0 for <dmarc@ietf.org>; Thu, 13 Apr 2023 08:58:07 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1681401486; x=1683993486; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=3I3/KoNde+FxiijIBuso81Bbe90OLwFgrFmO9e7G/WQ=; b=o4zKOEzsbjrS2ByJ2i6H5iM3yPs2JuIzr2hl3NstPcfzKEDUtHUbEGeP5LVVafv1tg g4QB9HfRWmON33ZFE1M/2bfGAI3aFKzB8v0faZeO7kdAAcCGUGY+WEalF2FZ6SrYDk/a 0ZYKa06RLbPRMnwXnzX1ro15XgpM4Vv5xPYu9k23hns2L75BvAbURrglEB9rBY3C5D4a f7Yx0ZyVAO7DyivBzUqBPsAwZDHLqKe9Epbf5WI4eade2eh/C7iyIRy0ofCxW+IH3KCV +EQxDxXSrTr+AcR2XT1R8SDnQCQ3rzjTqFIrGgE5pbuhV6OCSj7fctipdzSsSYwSAikz aiDw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1681401486; x=1683993486; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=3I3/KoNde+FxiijIBuso81Bbe90OLwFgrFmO9e7G/WQ=; b=dp8ismfvkvu+H0ryKNz3X+41ZVsYAR7uIB1B73+RKXxwDSll9Y2XcJ/OcOQRBsLV6/ xohSYEEtreEWqtVP+6Oypp9LvdAFMPw4Oq+jc1V2EvfllMR4OfxexUfw5AFIZaKWj3Op Uyv8Orsk8EUfBQF4xTBmo6THd3BpjkFl63M+kMWj3gD/sfrYJdW4U40IN/67Mv050J1u Mp/uEV+tqmnTHmKGRp58J55d4va83XH2ws8O0Cbr+Q2SVNQ7MqxYTFZzIYTCe6Rm9Aqz JKZG+9J2qRQmOVsmoexxoIYdIPh+bnQToBQyvQYepifP5Nqv39UxgPgy36SNnZeeR/t3 GXGw==
X-Gm-Message-State: AAQBX9fD8U5RXojeiRSugHcI8ZO8ZJyAgVuIB1l+dH7EijoUDBq0u3oR 4jeOqg50kciFL1MgKvaHHfZ4W3gQeIviBKuIozE=
X-Google-Smtp-Source: AKy350ZEC0y+AELVDQXk3+InMyAzTdP24jwD1PxIwSGglTXKhKE0D/SVyqn/6AvB6vIGVSvQPj1BF57Qvetv8tVBoDU=
X-Received: by 2002:a9f:3012:0:b0:6cd:2038:4911 with SMTP id h18-20020a9f3012000000b006cd20384911mr1401189uab.1.1681401486474; Thu, 13 Apr 2023 08:58:06 -0700 (PDT)
MIME-Version: 1.0
References: <CAL0qLwZc2X7tyP+_8vvL3Yb7uJk6td3XGbsXUB68BNUEMhV4yQ@mail.gmail.com> <8d970e6b-8fa7-da85-5c47-d485abbc43be@crash.com> <CAL0qLwZJjBq0T8kODJifTT10ttJJE2Bof5kJZACRTwyauzwQ6A@mail.gmail.com>
In-Reply-To: <CAL0qLwZJjBq0T8kODJifTT10ttJJE2Bof5kJZACRTwyauzwQ6A@mail.gmail.com>
From: Dotzero <dotzero@gmail.com>
Date: Thu, 13 Apr 2023 11:57:55 -0400
Message-ID: <CAJ4XoYcHeFe0kS9QHz4fP5TbOMOiW8mJaiNYx+Yk8keZYW-yDQ@mail.gmail.com>
To: "Murray S. Kucherawy" <superuser@gmail.com>
Cc: Steven M Jones <smj@crash.com>, dmarc@ietf.org
Content-Type: multipart/alternative; boundary="000000000000538b8b05f939ca27"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dmarc/rvRcfisvzVDorfoAR-ujwJQqxoA>
Subject: Re: [dmarc-ietf] Signaling MLMs
X-BeenThere: dmarc@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Domain-based Message Authentication, Reporting, and Compliance \(DMARC\)" <dmarc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dmarc>, <mailto:dmarc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dmarc/>
List-Post: <mailto:dmarc@ietf.org>
List-Help: <mailto:dmarc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dmarc>, <mailto:dmarc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 13 Apr 2023 15:58:08 -0000

On Wed, Apr 12, 2023 at 11:38 PM Murray S. Kucherawy <superuser@gmail.com>
wrote:

> On Wed, Apr 12, 2023 at 12:45 PM Steven M Jones <smj@crash.com> wrote:
>
>> This puts me in mind of Section 8.5, which calls out some potential
>> impacts of blocking policies to "Mediators," which role doesn't otherwise
>> appear very often in this document. Is there any need to add Mediator
>> Actions/Considerations under section 5? Or does this belong in a separate
>> document?
>>
>
> We should probably review it and think about whether what it says is
> enough.
>

This is certainly worth a discussion.


> ISTR there were some vocal and visible mailing list operators that were
>> rejecting messages from domains that published "p=reject" policies, maybe
>> around 2014-15? I also thought they did this by checking the sending
>> domain's published policy in DNS, to your point about implementation.
>>
> This would be great [anec-]data to have.  Do you remember where you might
> have seen it?
>

My recollection is similar to Steve's except that I saw the talk but didn't
see the walking the walk.

> In any case, are we really going to start suggesting that list operators
>> start rejecting messages sent from domains that publish a blocking policy,
>> as official guidance? (Now I'm looking ever so forward to catching up on
>> these other threads - what the heck are people seeing out there??)
>>
>
> Well, this WG is chartered to come up with some kind of standards track
> solution to the problem.  I don't see one in DMARCbis at the moment.  Given
> how long this WG has existed so far, that's a fairly glaring omission.
> Doesn't seem to me this idea should be off the table just yet...
>

 I don't think it should be off the table but believe it is only one of the
options that MLMs/forwarders have.

Michael Hammer