Re: [dmarc-ietf] DMARC bis: ticket 51: disposition reporting in aggregate reports

Seth Blank <seth@valimail.com> Wed, 30 September 2020 15:12 UTC

Return-Path: <seth@valimail.com>
X-Original-To: dmarc@ietfa.amsl.com
Delivered-To: dmarc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8772C3A0A93 for <dmarc@ietfa.amsl.com>; Wed, 30 Sep 2020 08:12:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=valimail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9yL1jVr1iYHE for <dmarc@ietfa.amsl.com>; Wed, 30 Sep 2020 08:12:21 -0700 (PDT)
Received: from mail-wr1-x434.google.com (mail-wr1-x434.google.com [IPv6:2a00:1450:4864:20::434]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7E92E3A0A8E for <dmarc@ietf.org>; Wed, 30 Sep 2020 08:12:21 -0700 (PDT)
Received: by mail-wr1-x434.google.com with SMTP id k10so2222946wru.6 for <dmarc@ietf.org>; Wed, 30 Sep 2020 08:12:21 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=valimail.com; s=google2048; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=4l1wcY4mFbvtVXkt69pCKPV4n/2e0oFvh2KbJ2a5iug=; b=Wc7h85PGAynE0AcdB2bX+4aAM7M8eEjPw9mDnf4WuJrKGlLRxO03+wS2KuNbeDjjCh 1iWoeBx80oDd0syF1fJGA3HW868vNnuUe5cSr4TJyyZ1pZREq9bjBds/jAwfrXRuTd/9 HjpF/np2gs8K+eUN4jrcYK9Yi6PYCCThxwlyPUDft4tvZgz40mtbjlkIPAkhJaaTAO9c pluiVIWJGl+oCfdTyTbCsbquwQtxia6nIGuADWmMhR0oQGVsjKPNJ1ViLBcF7zr/i5fi WD1A8vzxtjJXQ5/RkZP2Bot7Bn3/AQftTToAl8p2aZtp/x4n29u4wrQC4EKiZRwAcUR1 X2ZA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=4l1wcY4mFbvtVXkt69pCKPV4n/2e0oFvh2KbJ2a5iug=; b=ks0OeqEqL6b93V8fi7bvKZrcCTXqbx7Zpqm5bIHXT/Jn8Ng6wAKOLeqNpDp7GibWbo C3C9WniRW7PTluDeNWwxbviL0sZaTbt0jYUY4Qs6t/rVjEkVOpQDZ8E0NRX+6uKMbMdm mo+JecehIB5tOkBQkYwbV299s2zCDuKVDOP9BlWIp6TMa67SNyyt4cXGdDdyUqdWOqxR dca442WoAafRPrtn+8theCi8yBDezdvVsRmE48ReTH2vxwiQ43ARRH9ySW4xF+WKMyQI AHLAbm4W5r0SGJbUtgNmD3lmRUWQt/VOlKf605jUMe8B/UgsaU5SLiEkX/filCg2edcA Qxig==
X-Gm-Message-State: AOAM5339YPywTBbJcRKJg5BCB2qUNxcC4bCBkd6qI4gNsxH3aekq+kcY fVhnDYVLFOokXeJfuu3pa6TDEfV4p2CyzVtozp3/Kw==
X-Google-Smtp-Source: ABdhPJwLqVVh4o5Dyifq3DkDaxk6n9a6nGFeAsXwGqICaZStUKswE1L8AHq+WrOneBUjWMJ9Hat3qlW9rjUU4Wq2eu4=
X-Received: by 2002:a5d:4c88:: with SMTP id z8mr3656988wrs.218.1601478739576; Wed, 30 Sep 2020 08:12:19 -0700 (PDT)
MIME-Version: 1.0
References: <CAOZAAfPVicBggPbctta9w-v5G2cHxMtuUwB-stu+0-KB85hCiw@mail.gmail.com> <CAL0qLwZOb00dKfQu5Uraigb3SiCBXwtzhRg5bh9sWv==yBw9pg@mail.gmail.com> <CABuGu1q2oxYq_1ReGzDFj+iRRhsmw=tLuZORxSTXs1Zv4eHqbg@mail.gmail.com> <CAOZAAfMz+eTkVW6Nytpsa1-GaXL3GuULwdrG9so=ybjXo+aS4A@mail.gmail.com> <10f0dc9f-ba9e-1a64-39f6-1d98baef582d@tana.it> <CABuGu1rCKFSENSEwuW-f1S0MvZxyBZGSAdz5G6NsatgEvgfZog@mail.gmail.com> <CAOZAAfPbRi4u-vpUtMXZM618+uH4w9teUPQKWpvTTCKTZn86jQ@mail.gmail.com> <974d8e44-0cf6-fa06-9437-04fb86ec99ed@dcrocker.net> <CABuGu1oX2Q2L-KbdGwmxQkGwox5gjQtfXR-uZw8fTkG2yo3fEA@mail.gmail.com>
In-Reply-To: <CABuGu1oX2Q2L-KbdGwmxQkGwox5gjQtfXR-uZw8fTkG2yo3fEA@mail.gmail.com>
From: Seth Blank <seth@valimail.com>
Date: Wed, 30 Sep 2020 08:12:08 -0700
Message-ID: <CAOZAAfO4sGsrnZgotKnGBpwkjOXOjQBgAshroqoD+hiNksVeng@mail.gmail.com>
To: "Kurt Andersen (b)" <kboth@drkurt.com>
Cc: Dave Crocker <dcrocker@bbiw.net>, "dmarc@ietf.org" <dmarc@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000006363d805b08953c2"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dmarc/vlqWrBNNZ-gD8xYFUG7AX9Ix8AY>
Subject: Re: [dmarc-ietf] DMARC bis: ticket 51: disposition reporting in aggregate reports
X-BeenThere: dmarc@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Domain-based Message Authentication, Reporting, and Compliance \(DMARC\)" <dmarc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dmarc>, <mailto:dmarc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dmarc/>
List-Post: <mailto:dmarc@ietf.org>
List-Help: <mailto:dmarc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dmarc>, <mailto:dmarc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Sep 2020 15:12:25 -0000

On Wed, Sep 30, 2020 at 8:01 AM Kurt Andersen (b) <kboth@drkurt.com> wrote:

> On Tue, Sep 29, 2020 at 3:50 PM Dave Crocker <dhc@dcrocker.net> wrote:
>
>> On 9/29/2020 3:08 PM, Seth Blank wrote:
>> > I don't know of any receiver that checks DMARC, but then doesn't check
>> > alignment
>>
>> It's not a matter of field statistics:
>>
>>       Since checking alignment is an obvious part of the DMARC
>> procedure, if someone does not follow the specification, they are not
>> doing DMARC.
>>
>
> Does that mean that "none" is not an appropriate verdict?
>

No, per https://tools.ietf.org/html/rfc7489#appendix-C "none" is the only
option for when a policy action is not undertaken:

   <!-- The policy actions specified by p and sp in the
        DMARC record. -->
   <xs:simpleType name="DispositionType">
     <xs:restriction base="xs:string">
       <xs:enumeration value="none"/>
       <xs:enumeration value="quarantine"/>
       <xs:enumeration value="reject"/>
     </xs:restriction>
   </xs:simpleType>

The point of this thread, and where consensus appears to lie, is adding
another value to disambiguate the use cases.


> --Kurt
>


-- 

*Seth Blank* | VP, Standards and New Technologies
*e:* seth@valimail.com
*p:* 415.273.8818


This email and all data transmitted with it contains confidential and/or
proprietary information intended solely for the use of individual(s)
authorized to receive it. If you are not an intended and authorized
recipient you are hereby notified of any use, disclosure, copying or
distribution of the information included in this transmission is prohibited
and may be unlawful. Please immediately notify the sender by replying to
this email and then delete it from your system.