Re: DMARC: perspectives from a listadmin of large open-source lists

[[e-mail]]

> On Sun, Apr 13, 2014 at 7:57 PM, Miles Fidelman
> <[e-mail]>wrote:

> >
> > It strikes me that the real way to address some of these issues is to add
> > a few new headers to SMTP - to get rid of the overloading of the From: and
> > Reply-to: headers associated with mailing lists.  An SMTP extension that
> > would absorb some of the well-known and well-understood functions of list
> > software.
> >
> > [...]
> >

> I made that same suggestion on a different list.  It seems as if that
> suggestion was made long ago and the debate reached "religious"
> proportions.  One of the usual answers emerged, which was that it'll take
> forever to get this deployed with sufficient ubiquity as to be helpful.

Suggestion? Try suggestions. I can think of at least four proposals at various
times, and I'm quite sure there have been others. At least one of them, by John
Myers, was written down in a draft.

And the problems with these proposals weren't religious. Rather, the problem
has always been that originator header semantics are already fairly nuanced,
and adding a bunch of them seems to exceed our design abilities. As a result
the discussions bogged down in misunderstandings about minutiae and talking
at cross purposes.

The only discussion I know of in this space that reached "religious
proportions" was the one in the failed mailing list WG.  But that was largely
focused on the "right" way to use existing header fields, not the addition of
new fields. So I don't think that really counts.

> I'm guessing that means we shouldn't try.

OK, for this to work you're going to have to come up with a solution that's
clear and comprehensible, get general agreement on it, publish it, and then get
widespread support for it implemented and deployed in both list processors and
user agents in a fairly timely way.

I'd also say there's a good chance that DMARC will have to be changed in some
way to support it, so that needs to be on the table. And that support needs to
be deployed.

Given these realities, do you think this is worth spending (a probably large
amount of) time doing?

				Ned