Re: [dmarc-ietf] cousin domain definition (was Re: Fwd: Eliot's review of the DMARC spec)

Matt Simerson <matt@tnpi.net> Tue, 09 July 2013 23:35 UTC

Return-Path: <matt@tnpi.net>
X-Original-To: dmarc@ietfa.amsl.com
Delivered-To: dmarc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9374D21F943C for <dmarc@ietfa.amsl.com>; Tue, 9 Jul 2013 16:35:59 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.598
X-Spam-Level:
X-Spam-Status: No, score=-3.598 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LjdUnE2AR1QT for <dmarc@ietfa.amsl.com>; Tue, 9 Jul 2013 16:35:55 -0700 (PDT)
Received: from mail.theartfarm.com (mail.theartfarm.com [208.75.177.101]) by ietfa.amsl.com (Postfix) with ESMTP id 9FAFD11E80C5 for <dmarc@ietf.org>; Tue, 9 Jul 2013 16:35:55 -0700 (PDT)
Received: (qmail 28729 invoked by uid 1026); 9 Jul 2013 23:35:51 -0000
Received: from c-76-121-98-64.hsd1.wa.comcast.net (HELO [10.0.1.32]) (76.121.98.64) by mail.theartfarm.com (qpsmtpd/0.93) with (AES128-SHA encrypted) ESMTPSA; Tue, 09 Jul 2013 19:35:51 -0400
Authentication-Results: mail.theartfarm.com; auth=pass (plain) smtp.auth=matt@theartfarm.com; iprev=pass
X-Virus-Checked: by ClamAV 0.97.8 on mail.theartfarm.com
X-Virus-Found: No
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=tnpi.net; h=content-type:mime-version:subject:from:in-reply-to:date:cc:message-id:references:to; s=mar2013; bh=gGZTTXKcp+XmegJjLDjHtT82Aw8FWAilLQZb/idCR8Y=; b=nRd1ZTGweMCjDhYCFzD9zBY8K35HHH9+3r+dp9fTO+0CLWAN2W3qJi01n0RNyJZe5EMrPwQoULORKErWw65iXnJfZAMse6xFJXf79Bdxt/OFwKYJNtpTGUUjN82fD9kSnf+5lsl5hxDhNo58KefK8dzNIaQTCUeRbdxxVLJvKHMSJA/5n7nHU76EmueIoGHnWQ31m64ZO4UfldNRIbi+Ywc57q1REdyl81lNEGfHbz2f2diL7X3q0H9dylsv6H00sF0tsBZTDDh8h7H4Gr1x2TlUN37n6YVp9ZXcUR8lk2HBiIB7yR2Lkk66vMW5jfTAK6kTMVky0nckfgfM4Cpi0A==
X-HELO: [10.0.1.32]
Content-Type: multipart/alternative; boundary="Apple-Mail=_D0B9C6A5-52F0-4991-AF77-A14368B5FBFE"
Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\))
From: Matt Simerson <matt@tnpi.net>
In-Reply-To: <CAESBpdBUFG6vf7Nr3OcJpXOsMHkhd5x9NZq_zbmP4PBXxgcRYg@mail.gmail.com>
Date: Tue, 09 Jul 2013 16:35:52 -0700
Message-Id: <D025D6D5-E1DD-4FC6-A3B0-79B49B38BED7@tnpi.net>
References: <519B47DC.20008@cisco.com> <CAL0qLwYZOp1FNVSAmzXYkZG_O3Yv+EQrAKKLpRiE5svcOMamTA@mail.gmail.com> <6.2.5.6.2.20130523002139.0da7ac58@resistor.net> <CAL0qLwYT6BS=HGLX1-u80aqaJWefipT5tcg5Ut_549y4rOej9g@mail.gmail.com> <51D858EB.3030202@gmail.com> <CAL0qLwZAVH=bK=jZKuk4ZkcELSXQ0SB5_WoHKETTZwo5f43Qtw@mail.gmail.com> <CAL0qLwb-m7BEBQ7snR4zQqMWu0H17P-+aOaxb=4t8pY58dXGRw@mail.gmail.com> <CAC4RtVAmPksYdS=iT2TNN82nGgNLGkX1gZoEUggX9xcgZWoZUw@mail.gmail.com> <CAESBpdBUFG6vf7Nr3OcJpXOsMHkhd5x9NZq_zbmP4PBXxgcRYg@mail.gmail.com>
To: Steve Jones <steven.m.jones@gmail.com>
X-Mailer: Apple Mail (2.1508)
Cc: "dmarc@ietf.org" <dmarc@ietf.org>, Barry Leiba <barryleiba@computer.org>, "Murray S. Kucherawy" <superuser@gmail.com>
Subject: Re: [dmarc-ietf] cousin domain definition (was Re: Fwd: Eliot's review of the DMARC spec)
X-BeenThere: dmarc@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: "Domain-based Message Authentication, Reporting, and Compliance \(DMARC\)" <dmarc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dmarc>, <mailto:dmarc-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dmarc>
List-Post: <mailto:dmarc@ietf.org>
List-Help: <mailto:dmarc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dmarc>, <mailto:dmarc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 09 Jul 2013 23:35:59 -0000

On Jul 8, 2013, at 2:17 PM, Steve Jones <steven.m.jones@gmail.com> wrote:

> On Mon, Jul 8, 2013 at 2:12 PM, Barry Leiba <barryleiba@computer.org> wrote:
> >
> >  <t hangText="Cousin Domain:"> <snip> </t>
> 
> If it's not too late to change the term "cousin domain" for this, I
> suggest finding another term.  "Cousin" implies a legitimate relation,

New Oxford American Dictionary, cousin:
	• a person belonging to the same extended family.
	• a thing related or analogous to another: the new motorbikes are not proving as popular as their four-wheeled cousins.

Having mulled this over, including time wearing my genealogist's hat, I heartily disagree that the term cousin implies any sense of legitimacy. In my experience, it is uncommon for people to distinguish between natural, step, adopted, foster, illegitimate, maternal, paternal, or even to describe the degree of a cousin. Until further inquiry or precision is requested, cousins are usually just cousins. 

> which this isn't.  I would consider, say, "ibm.com" and "lotus.com" to
> be cousin domains.  I might consider "microsoft.com", "hotmail.com",
> and "skype.com" to be cousin domains.

I think most anyone would accept that those are related domains. The term "cousin domain" is already established and already conveys a sense of illegitimacy.  Adding a new term to the mix with a slightly different meaning isn't going to help anyone, even if it is semantically more correct. 

> Things that try to look like they're related, but *aren't*, are what we're talking about here, and
> I don't think of those as cousins.

But a cousin domain *is* related to the target domain, typically by appearance. It's just that as you pointed out earlier, the relationship is not legitimate. 

Matt