Re: [dmarc-ietf] Search for some consensus, was: Proposed text for p=reject and indirect mail flows

Jesse Thompson <zjt@fastmail.com> Fri, 28 April 2023 03:16 UTC

Return-Path: <zjt@fastmail.com>
X-Original-To: dmarc@ietfa.amsl.com
Delivered-To: dmarc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4927DC13AE25 for <dmarc@ietfa.amsl.com>; Thu, 27 Apr 2023 20:16:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.796
X-Spam-Level:
X-Spam-Status: No, score=-2.796 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fastmail.com header.b="hQrIZD6z"; dkim=pass (2048-bit key) header.d=messagingengine.com header.b="eNP/d+xJ"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MxiOSaEEa78s for <dmarc@ietfa.amsl.com>; Thu, 27 Apr 2023 20:15:56 -0700 (PDT)
Received: from wout4-smtp.messagingengine.com (wout4-smtp.messagingengine.com [64.147.123.20]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DE194C159A35 for <dmarc@ietf.org>; Thu, 27 Apr 2023 20:15:55 -0700 (PDT)
Received: from compute1.internal (compute1.nyi.internal [10.202.2.41]) by mailout.west.internal (Postfix) with ESMTP id 5FD4D32009AF for <dmarc@ietf.org>; Thu, 27 Apr 2023 23:15:55 -0400 (EDT)
Received: from imap42 ([10.202.2.92]) by compute1.internal (MEProxy); Thu, 27 Apr 2023 23:15:55 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fastmail.com; h= cc:content-type:content-type:date:date:from:from:in-reply-to :in-reply-to:message-id:mime-version:references:reply-to:sender :subject:subject:to:to; s=fm3; t=1682651754; x=1682738154; bh=0L hnrcbqaUF51XA34aXp6B0xC/o6R6pgZDfM1sJrzuU=; b=hQrIZD6zVdv+wcObQV DVG1je1FosnkpCfEVzD26tpCIbhMqv+ad03qWbAFr4Fv4nAyvOakcai3QSqApsGC bMZ+68EQ0tRQ75JyGfPgjTEaNUYtwtAeUdtRaVCKPwuJpOx/15vMSC6cTZhVEfIR cnq4RbQ5FY5/MybDlz9YIiXxYb7skhv67bgFhtFT5CbP9G5ICCnGnME7KVG0FvrO VVfWHMtNtm8C0cErNbAlRaMD7HDiDk8GhvJWzcOFiXMd5oar6Oth5JKvlkDOgyIr 2jW73Jh6TaBwWYRBs+OEuQzGsWBKCsB2Xqniy5KGzEj2Iz76ZzofR4RlsWGUN+jg RFrQ==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:sender:subject :subject:to:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm3; t=1682651754; x=1682738154; bh=0LhnrcbqaUF51 XA34aXp6B0xC/o6R6pgZDfM1sJrzuU=; b=eNP/d+xJePidzJORyG5hvaHsuw62v rLkeMyLgL9jec0Jz+Mino1ox8vJ7CxCayfssmq9lezNJQI2U4WPVqo7DFNzR+dUn f6+qlcEFBp51vx/CmmYvWDMWFspde4rPLlxCDSC6R1T/W2yRPsb7UmB7VAVX6P33 7yOTInxy82nX8LM+xdOYJNYoGD5QKjplHBLMUAQa2NqlPgnMNE5sqQ0pxhd+hYpx BATA829oRYDsQfsOa9cFdtkQrGutMjra+ooqBrTM/ctZ2ErkusVINC6NufJyqgaT A03AcUnbshYb+8SbNxNIkVKO77GcOcuxMTxwtGA1gbWHdrudcYhFtYkJQ==
X-ME-Sender: <xms:ajpLZM374wqd-asrf_9IfyF-yvitzoHX4o0p12i_zSvBs4L9WW7rvQ> <xme:ajpLZHGAPqYZDv6ph-LXspTM32c7Jf_-KwlK5T_h47u7oiUx0o036k09nhFak9Y2U CekOfg1r4_2RxlGU1k>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvhedrfedujedgjeduucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpefofgggkfgjfhffhffvufgtsegrtd erreerredtnecuhfhrohhmpedflfgvshhsvgcuvfhhohhmphhsohhnfdcuoeiijhhtsehf rghsthhmrghilhdrtghomheqnecuggftrfgrthhtvghrnhepgeeulefhfedtheeguedvud evkeduveelffevueehuddutdduhfejfeegleffieegnecuvehluhhsthgvrhfuihiivgep tdenucfrrghrrghmpehmrghilhhfrhhomhepiihjthesfhgrshhtmhgrihhlrdgtohhm
X-ME-Proxy: <xmx:ajpLZE6Ojk0McORp6XktCHyftEHBL_126DXx1EFvB7AUClwAlgh3bA> <xmx:ajpLZF0XWDJ2ZLU-EIIXcF9lZ88MBASaaDH17PemfUqu87UM7VcPtQ> <xmx:ajpLZPFEfwDcN3IFjsXCaS53W0IBHwJrGMn2wCX7DoLu3lfEG8-9eg> <xmx:ajpLZDQzuUSsplm5UPYN90CMpH24nggykxKzN4rLejCs5YNxbQS4gw>
Feedback-ID: i1a614672:Fastmail
Received: by mailuser.nyi.internal (Postfix, from userid 501) id C3759BC0078; Thu, 27 Apr 2023 23:15:54 -0400 (EDT)
X-Mailer: MessagingEngine.com Webmail Interface
User-Agent: Cyrus-JMAP/3.9.0-alpha0-374-g72c94f7a42-fm-20230417.001-g72c94f7a
Mime-Version: 1.0
Message-Id: <838f6026-a522-4e14-9ec9-046157abf6c0@app.fastmail.com>
In-Reply-To: <62F9992E-B7BE-47B8-B35E-EB05CB9BE9EC@kitterman.com>
References: <20230426160609.8532BC586620@ary.qy> <B08C7AD1-B14B-43FC-BE85-DFBD5282A8DB@bluepopcorn.net> <BF125E76-EAEF-468B-93F2-3318736F932F@kitterman.com> <MN2PR11MB43511D3478D3682AABD35969F76A9@MN2PR11MB4351.namprd11.prod.outlook.com> <0db5e3fd-68cf-22ad-7c63-e1c1d5debe14@tana.it> <479b6be4-c080-4826-9384-1bd02ce78e3f@app.fastmail.com> <e40a5fcf-ba0a-45ef-85eb-2ce063004cba@app.fastmail.com> <62F9992E-B7BE-47B8-B35E-EB05CB9BE9EC@kitterman.com>
Date: Thu, 27 Apr 2023 22:14:16 -0500
From: Jesse Thompson <zjt@fastmail.com>
To: dmarc@ietf.org
Content-Type: multipart/alternative; boundary="e6b21a56867440679e4de69e19f90760"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dmarc/uYb0FgRKpxMyIDJXzOUi45UhrM8>
Subject: Re: [dmarc-ietf] Search for some consensus, was: Proposed text for p=reject and indirect mail flows
X-BeenThere: dmarc@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Domain-based Message Authentication, Reporting, and Compliance \(DMARC\)" <dmarc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dmarc>, <mailto:dmarc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dmarc/>
List-Post: <mailto:dmarc@ietf.org>
List-Help: <mailto:dmarc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dmarc>, <mailto:dmarc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 28 Apr 2023 03:16:01 -0000

On Thu, Apr 27, 2023, at 9:54 PM, Scott Kitterman wrote:
> 
> 
> On April 28, 2023 2:49:48 AM UTC, Jesse Thompson <zjt@fastmail.com> wrote:
> >On Thu, Apr 27, 2023, at 9:40 PM, Jesse Thompson wrote:
> >> On Thu, Apr 27, 2023, at 10:44 AM, Alessandro Vesely wrote:
> >>> Also, state that serious consideration includes testing p=quarantine; pct=0^H t=y.
> >> 
> >> I was going to say something similar but I think that it is implied by section A.7
> >
> >Actually, I like referencing A.7 here as a pointer.
> >
> >This achieves consensus on the rewrite objection. 
> >
> >A.7 describes the rewrite without condoning it:
> >
> >   Operational experience showed ...
> >   ... header rewriting by an
> >   intermediary meant that a Domain Owner's aggregate reports could
> >   reveal to the Domain Owner how much of its traffic was routing
> >   through intermediaries that don't rewrite the RFC5322.From header
> 
> I think we can describe what people are doing without placing a strong value judgement on it, but I think we have to say we haven't assessed all the associated interoperability impacts of it and at least mention that 5321 says not to do it.

Restricting the "MUST NOT" to the context of 5321 achieves consensus, I think

Jesse