Re: dmarc damage, was gmail users read on... [bozo subtopic]

Doug Barton <dougb@dougbarton.us> Fri, 12 September 2014 17:27 UTC

Return-Path: <dougb@dougbarton.us>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EB8AA1A6FCA for <ietf@ietfa.amsl.com>; Fri, 12 Sep 2014 10:27:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.654
X-Spam-Level:
X-Spam-Status: No, score=-3.654 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RP_MATCHES_RCVD=-1.652, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OQpjW2TJglcd for <ietf@ietfa.amsl.com>; Fri, 12 Sep 2014 10:27:05 -0700 (PDT)
Received: from dougbarton.us (dougbarton.us [IPv6:2607:f2f8:ab14::2]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A5E9E1A007E for <ietf@ietf.org>; Fri, 12 Sep 2014 10:27:04 -0700 (PDT)
Received: from bcn-dbarton.lan (unknown [67.159.169.102]) by dougbarton.us (Postfix) with ESMTPSA id BFFDF22B46; Fri, 12 Sep 2014 17:26:58 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=dougbarton.us; s=dkim; t=1410542824; bh=Y7HbZInwSljGGg/nDkDdJnYkomESSe+8jIHK76vTgJ8=; h=Date:From:To:CC:Subject:References:In-Reply-To; b=thsPyYc1MS3I+yrfkohkgNEzukxLAG05fBMBQ4EBywmoLUpflqRC0HbQ0slC2l/9k 53haWd/4hZ405ej0au9jI3VR7DWv6lSE0K5gVjxLQxXtBlIP81LgrUGEVRi6thlXlb L32TkvNSYV/IRoKdp3nzzy7yUpPxcM1crdFb5BdE=
Message-ID: <54132CE9.1010907@dougbarton.us>
Date: Fri, 12 Sep 2014 10:27:05 -0700
From: Doug Barton <dougb@dougbarton.us>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:31.0) Gecko/20100101 Thunderbird/31.1.1
MIME-Version: 1.0
To: Wei Chuang <weihaw@google.com>
Subject: Re: dmarc damage, was gmail users read on... [bozo subtopic]
References: <20140911202058.3327.qmail@joyce.lan> <541208F6.1010302@dougbarton.us> <bb48b8f170074ddeb25cbb213f613892@DM2PR0301MB0655.namprd03.prod.outlook.com> <CE39F90A45FF0C49A1EA229FC9899B0525E804C0@USCLES544.agna.amgreetings.com> <CAAFsWK0os6Var4K9g+MLvhR5__4bGfH+kg-0uQh7ZE5V6A-fxg@mail.gmail.com>
In-Reply-To: <CAAFsWK0os6Var4K9g+MLvhR5__4bGfH+kg-0uQh7ZE5V6A-fxg@mail.gmail.com>
OpenPGP: id=1A1ABC84
Content-Type: text/plain; charset="windows-1252"; format="flowed"
Content-Transfer-Encoding: 7bit
Archived-At: http://mailarchive.ietf.org/arch/msg/ietf/FDeZFAQCfNUv-x1paakGn_ownYY
Cc: "ietf@ietf.org" <ietf@ietf.org>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 12 Sep 2014 17:27:07 -0000

On 9/12/14 10:20 AM, Wei Chuang wrote:
> I also just wanted to bring another high level idea to the table- rather
> than discuss which work arounds to mandate (and all have problems), why
> not revisit the authentication methods?  In particular the current DKIM
> method, while very powerful in the security sense, is very restrictive.

Because the large mail vendors have already spoken, and they like the 
way that SPF/DKIM/DMARC work. Spending more time talking about how we 
think they SHOULD work is wasted effort.

Doug

PS, I don't like this any more than some of y'all do, but I think it's 
rather important that we recognize the reality of the situation.