Re: Yahoo breaks every mailing list in the world including the IETF's

Douglas Otis <doug.mtview@gmail.com> Mon, 19 May 2014 18:13 UTC

Return-Path: <doug.mtview@gmail.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B1B681A00EA for <ietf@ietfa.amsl.com>; Mon, 19 May 2014 11:13:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ic2eRJJ9I_69 for <ietf@ietfa.amsl.com>; Mon, 19 May 2014 11:13:56 -0700 (PDT)
Received: from mail-pb0-x234.google.com (mail-pb0-x234.google.com [IPv6:2607:f8b0:400e:c01::234]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D954C1A00B1 for <ietf@ietf.org>; Mon, 19 May 2014 11:13:56 -0700 (PDT)
Received: by mail-pb0-f52.google.com with SMTP id rr13so6221652pbb.39 for <ietf@ietf.org>; Mon, 19 May 2014 11:13:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=content-type:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=0tamypnUeLIUa7z4G6Y4Q6AHM7KLHtATpnG4bznkY+w=; b=nwadhvNe7UhJK2Uz8y1cUsASjhZ/4AAXpzsXm3JnOP4c6zLooV2VcwVxKNwpzJl3X0 9KPXyr5c0yyNMw2uxPjLix9otteusdPvXFY8TmkRfIGxgkFY5exxOFw4qQpG48eSeK9k /bXgRHTMbEPzNdTYH3pF2WZhAPvEk6MhM0K0mr+Q0OMq1sELq/joy6s53dVBbkqT7XDA QWAWUt7cvnpqLxjAxLi6A+WQozV9FUh496rH+Z+X+TNsMtGMkUb5iBlZiYPMvF/7YIei 6RFsenT5x/CPYopPqQIYtoLhMND58JGeiB6FzvA8YZLLWd5mVDBYZnVjktrwbZ+zeWWu T4WA==
X-Received: by 10.68.171.4 with SMTP id aq4mr45172883pbc.150.1400523236656; Mon, 19 May 2014 11:13:56 -0700 (PDT)
Received: from [192.168.2.224] (c-67-188-1-12.hsd1.ca.comcast.net. [67.188.1.12]) by mx.google.com with ESMTPSA id bc4sm31271221pbb.2.2014.05.19.11.13.55 for <multiple recipients> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Mon, 19 May 2014 11:13:55 -0700 (PDT)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.2\))
Subject: Re: Yahoo breaks every mailing list in the world including the IETF's
From: Douglas Otis <doug.mtview@gmail.com>
In-Reply-To: <m2oaytisqq.wl%randy@psg.com>
Date: Mon, 19 May 2014 11:13:54 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <7FFFB57E-3EF9-46A9-8C02-7B6CBF340F63@gmail.com>
References: <53752DAC.4090305@transbay.net> <6.2.5.6.2.20140516234651.0b808458@resistor.net> <CAMm+Lwi=eKby_7erZ6=MrwfSAJwt7HewALKHz38dWGp7gvGv+A@mail.gmail.com> <6.2.5.6.2.20140517225044.0bb15010@elandnews.com> <53799704.9070002@transbay.net> <54B6E91E-C033-4B1C-8A3F-0DAAD85D6FC0@gmail.com> <537A3905.6090203@acm.org> <m2oaytisqq.wl%randy@psg.com>
To: Randy Bush <randy@psg.com>
X-Mailer: Apple Mail (2.1878.2)
Archived-At: http://mailarchive.ietf.org/arch/msg/ietf/4dmElDWYz79Ngs_wJmjSEg32vm8
Cc: Avri Doria <avri@acm.org>, IETF Disgust <ietf@ietf.org>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 19 May 2014 18:13:58 -0000

On May 19, 2014, at 10:27 AM, Randy Bush <randy@psg.com> wrote:

>>> but eliminating those will not solve the spam problem.
>> 
>> spam is a chronic disease for which there is no magic bullet.
>> like most chronic diseases, Internet or otherwise, it can be mitigated
>> and controlled but not cured.
>> 
>> As long as people are aiming at a cure, it will be easy to put forward
>> absurd solutions.  And solutions that break things.
> 
> and if you think you are big enough, you can try to outsource the
> problem and dump it on the rest of the network

Dear Randy,

Well said.  They used DMARC which affords them feedback on their email delivery.  It was assumed DMARC domains would utilize this feedback to minimize any disruption.  DMARC even recommends monitoring be done prior to restricting messages.  The problem is DMARC does not permit the ~30K domain exceptions their feedback indicates is needed.

This affects informal third-party services often provided on a gratis basis to their users.  Only they have the necessary exception information needed to avoid disruption which can be conveyed in a single UDP transaction.  Some have insisted that such disruption is normal and that receivers are always expected to deal with such problems.  Clearly, this is unfairly outsourcing a created problem, since the solution is analogous to returning the address of a hostname.  Will they soon decide they need to restrict DNS for these other services as well?  Is a single UDP transaction too much to pay to offer their users services they desire?

Regards,
Douglas Otis