Re: [dmarc-ietf] the long march, WGLC editorial review of draft-ietf-dmarc-dmarcbis-30

Scott Kitterman <sklist@kitterman.com> Sun, 07 April 2024 17:33 UTC

Return-Path: <sklist@kitterman.com>
X-Original-To: dmarc@ietfa.amsl.com
Delivered-To: dmarc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 12333C14F6AC for <dmarc@ietfa.amsl.com>; Sun, 7 Apr 2024 10:33:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.398
X-Spam-Level:
X-Spam-Status: No, score=-4.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (unsupported algorithm ed25519-sha256)" header.d=kitterman.com header.b="vEKj1S98"; dkim=pass (2048-bit key) header.d=kitterman.com header.b="EvB57ffs"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TIGFjLRfY1oc for <dmarc@ietfa.amsl.com>; Sun, 7 Apr 2024 10:33:30 -0700 (PDT)
Received: from interserver.kitterman.com (interserver.kitterman.com [IPv6:2604:a00:6:1039:225:90ff:feaa:b169]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E59BDC14F5F1 for <dmarc@ietf.org>; Sun, 7 Apr 2024 10:33:29 -0700 (PDT)
Received: from interserver.kitterman.com (interserver.kitterman.com [64.20.48.66]) by interserver.kitterman.com (Postfix) with ESMTPS id 830F1F8023A; Sun, 7 Apr 2024 13:33:11 -0400 (EDT)
DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/simple; d=kitterman.com; i=@kitterman.com; q=dns/txt; s=201903e; t=1712511176; h=date : from : to : subject : in-reply-to : references : message-id : mime-version : content-type : content-transfer-encoding : from; bh=V8bYkFUMFUwTr4Lg92Dc5VHmEWupiYgKueqyjZKe13I=; b=vEKj1S987Ux9qUvbXB8d9E3jYV47Iz3MPcubVL/I0mYvXnI3FIki7vd3jVSuKA2akNfJJ +DMmtGoR2tAQ3aOCA==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kitterman.com; i=@kitterman.com; q=dns/txt; s=201903r; t=1712511176; h=date : from : to : subject : in-reply-to : references : message-id : mime-version : content-type : content-transfer-encoding : from; bh=V8bYkFUMFUwTr4Lg92Dc5VHmEWupiYgKueqyjZKe13I=; b=EvB57ffsAguo++mgkZa9+m1ytfiakWAOwyYY6u96U+jcRM/WzVvYL3OBiZMhE6dJhmnCY tmbzRCIDZI0fFU6DNbqQ2XBHs89lVd9xpu5QwQpARHRm0s8+QPr72LOW+bdT8t3pKWEWvbe dVEVVjge+jSgxA+Nx5kPfVtzh3BdtJJSnQM1Jeyhljak8DD6RKvdmDMsRNf8pjwoZwqyCfk CcMt/lExszxwXdZbKlkODmQuYr5NjDMk6RJ0mxEXCNDSUVc8eQnYnOaRaF2jkgh4Bhp6q/h 3DxbalaF3JthbF6szKd2hiNZzH6P6rDC8VQ+G5Uuf9R/AcrGqY2zC2Cvzg5g==
Received: from [127.0.0.1] (static-72-81-252-22.bltmmd.fios.verizon.net [72.81.252.22]) by interserver.kitterman.com (Postfix) with ESMTPSA id 95AB2F80126; Sun, 7 Apr 2024 13:32:56 -0400 (EDT)
Date: Sun, 07 Apr 2024 17:32:52 +0000
From: Scott Kitterman <sklist@kitterman.com>
To: dmarc@ietf.org
In-Reply-To: <53f29df5-031a-8711-aed6-25c310f539a2@iecc.com>
References: <CAOZAAfPwJHKGyLjTkdGDqkMeK4RQX4Fj0rw-Upn0cLZ+cE74aA@mail.gmail.com> <2764165.rv8vZNihtd@zini-1880> <53f29df5-031a-8711-aed6-25c310f539a2@iecc.com>
Message-ID: <8C54A48A-5665-41A1-B64F-93A39CF0B12C@kitterman.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/dmarc/y6JDdf11PJ6zPJbEMmDxIzu4XSs>
Subject: Re: [dmarc-ietf] the long march, WGLC editorial review of draft-ietf-dmarc-dmarcbis-30
X-BeenThere: dmarc@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Domain-based Message Authentication, Reporting, and Compliance \(DMARC\)" <dmarc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dmarc>, <mailto:dmarc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dmarc/>
List-Post: <mailto:dmarc@ietf.org>
List-Help: <mailto:dmarc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dmarc>, <mailto:dmarc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 07 Apr 2024 17:33:34 -0000


On April 7, 2024 4:32:06 PM UTC, "John R. Levine" <johnl@iecc.com> wrote:
>On Sat, 6 Apr 2024, Scott Kitterman wrote:
>> As a side effect of the switch to the tree walk approach in DMARCbis, this is
>> no longer true.  For any subdomain without a DMARC record, the domains above
>> it in the tree are also checked, so you can specify a different policy/
>> reporting address for groups of subdomains below the org domain (as long as
>> you don't get past the max N value in length).
>
>Huh, what?  Whatever the tree walk finds is by definition the org domain. It's the same whether you're using it to check alignment or send reports.
>
>> I can articulate that N=5 is based on the longest email relevant entry in the
>> current PSL.  Why N=8 and not N=7 or N=9?
>
>Seth says there are people who need N=8 but for business reasons he can't tell us who they are.  I'm not thrilled about that but I see little downside to bumping the number up to 8.

I expect that's where we end up, but I think we need something more than one of the chairs said there are secret reasons.

Scott K