Re: [dmarc-ietf] Working group next steps

Douglas,

Can you show us a single email authentication standard that is 100%
deployed on the Internet? There isn't anything that comes close to that
achievement. Even things like DNS are not 100%. I know hosts that are only
reachable by IP address.

Michael Hammer

On Sun, Mar 31, 2019 at 2:31 PM Douglas E. Foster <
fosterd@bayviewphysicians.com> wrote:

> Certainly not.
>
> You cannot drop existing defenses until the new standard is 100% deployed
> on the Internet, which means probably never.    Your experimental
> implementation will need to prioritize the new test over the SPF test, to
> prove that it is working and to show that it is good at intercepting
> any subdomains that have been newly imagined by the attackers
>
> To speed up the deployment process for existing or new standards, IETF
> would meed to embrace the idea of defining required features of a spam
> filter.
>
> Doug Fosterd
>
> ------------------------------
> *From*: "Ian Levy" <ian.levy=40ncsc.gov.uk@dmarc.ietf.org>
> *Sent*: Sunday, March 31, 2019 6:18 AM
> *To*: "Scott Kitterman" <sklist@kitterman.com>, "IETF DMARC WG" <
> dmarc@ietf.org>
> *Subject*: Re: [dmarc-ietf] Working group next steps
>
> >> I’ll also offer gov.uk as an experimental ground (within reason!).
>
> > Excellent. I've listed it in the experimental registry at psddmarc.org..
> > Since you already had a live DMARC record for that domain, people can
> experiment with this now.
>
> I guess at some point we'll have to stop generating SPF and DMARC records
> for the non-existent subdomains of gov.uk so we can test the new stuff
> properly. When we're at that point, let me know.
>
> Ta.
>
> I.
>
> --
> Dr Ian Levy
> Technical Director
> National Cyber Security Centre
> ian@ncsc.gov.uk
>
> Staff Officer : Kate Atkins, kate.a@ncsc.gov.uk
>
> (I work stupid hours and weird times – that doesn’t mean you have to. If
> this arrives outside your normal working hours, don’t feel compelled to
> respond immediately!)
>
>
> This information is exempt under the Freedom of Information Act 2000
> (FOIA) and may be exempt under other UK information legislation. Refer any
> FOIA queries to ncscinfoleg@ncsc.gov.uk
> _______________________________________________
> dmarc mailing list
> dmarc@ietf.org
> https://www.ietf.org/mailman/listinfo/dmarc
>
> _______________________________________________
> dmarc mailing list
> dmarc@ietf.org
> https://www.ietf.org/mailman/listinfo/dmarc
>