Re: Enabling DMARC workaround code for all IETF/IRTF mailing lists

"Andrew G. Malis" <agmalis@gmail.com> Thu, 28 June 2018 17:36 UTC

Return-Path: <agmalis@gmail.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EAE34130E9D for <ietf@ietfa.amsl.com>; Thu, 28 Jun 2018 10:36:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XRRYXQqnHk9u for <ietf@ietfa.amsl.com>; Thu, 28 Jun 2018 10:36:37 -0700 (PDT)
Received: from mail-ot0-x241.google.com (mail-ot0-x241.google.com [IPv6:2607:f8b0:4003:c0f::241]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7F472130DFC for <ietf@ietf.org>; Thu, 28 Jun 2018 10:36:37 -0700 (PDT)
Received: by mail-ot0-x241.google.com with SMTP id b10-v6so5074594otl.10 for <ietf@ietf.org>; Thu, 28 Jun 2018 10:36:37 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=Hn4aShMHRMO//dHIDnbIyrV493zNySKzB6EXGLkxZww=; b=pG/cU5mJG0keDzDXVGtu0cSBeyOWpCbTFPJFcVwDyEhHZ3Db3upG8Emrcvq+ocQQyF wTwS+DnSuP6JCR1Gy1mke3lzV4fLM6XQnVNnIz8NIgVFtMcCDFh5+Blb4wt0CP43hMmv 1gPZ8Pjtrfb4SjFzwqkYzMdDwnJp2K87xbrjdaLNK06EPunJjPySeranycUKyMHQ9dUe no8hc1VV51F65NgPjhfuxCEZ2+OTjLRzW6MWLCQ1QlwfRRC7xq8d1rdEH7l6IUWskP6W RsNAtfNB+XE3+nBHIIiTozf0hW9JMbEfZuyF7234A//FfzVypT+9BVAXEsDUij/Wfdj8 EZtg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=Hn4aShMHRMO//dHIDnbIyrV493zNySKzB6EXGLkxZww=; b=aov99v75gDNEqnvJzHYHIbXumHy1KzsTO2cgQff7cRsZXDX0bT1UTlNPap3PxUHuHT j7pi3lqqUneGjLFLlE21a2yHsGVRAogbu0wqwSKtukHUMg+AO1TlqiZ5ZQdrnctLcCAW df9uE6DhfoS9vWuDf7hdgv9ozomENp88cqlQT4Ytv8IcMAFvuEde5khWHkzPe7z9oxHC 4w+uNLTZc8bBIXfDJk64SiW5DE6ROOUGlsCiadvmT5OqIN+M/YQJLeRvighBM64E3zHP 5VfFTpW0JSCgmiHrZ/yx7nzpz5SZGKSJRoN1+6L56n2ZuhJBgiJdGEAoOJsvWSvUkTey wmIw==
X-Gm-Message-State: APt69E1rXyssg2SYTiAIYvs9RWo0XkLYuJEbBksfnQsE0/oIbY2A7QIB LF5pCrtQbhgVAPuN/VA+XbIxFCRh9cePui/ayZk=
X-Google-Smtp-Source: AAOMgpdcqgD5juuf+Qo0+fdDnUkBIcn93w6jYm6pd0zaRxDFTQMWQRiQjOD+d1iUZR6cuNSkzqU8cZevxaHAU35LDqI=
X-Received: by 2002:a9d:4785:: with SMTP id b5-v6mr6141583otf.158.1530207396843; Thu, 28 Jun 2018 10:36:36 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a9d:30c3:0:0:0:0:0 with HTTP; Thu, 28 Jun 2018 10:36:16 -0700 (PDT)
In-Reply-To: <9210DAA1-437F-41E1-A9F1-20B10CDD9E6E@vigilsec.com>
References: <919855CA-9F77-420A-8B8F-79174CD2FC19@fastmail.fm> <CAA=duU36Tja0KNO2b-nNEUOU2WdehpUsY27TuhE6MQmABLerpA@mail.gmail.com> <9210DAA1-437F-41E1-A9F1-20B10CDD9E6E@vigilsec.com>
From: "Andrew G. Malis" <agmalis@gmail.com>
Date: Thu, 28 Jun 2018 13:36:16 -0400
Message-ID: <CAA=duU1noOby+C29kMghp2Q=dX4=pHr3b8fdD-47j676JTw4Zw@mail.gmail.com>
Subject: Re: Enabling DMARC workaround code for all IETF/IRTF mailing lists
To: Russ Housley <housley@vigilsec.com>
Cc: IETF <ietf@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000525750056fb72c6b"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/GvF5ix2wAU78U4PQV-hcPBUt6H4>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.26
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 28 Jun 2018 17:36:40 -0000

Russ,

No, DMARC was the cause of the false positives. Gmail would put legitimate
IETF emails from p=reject domains into my spam box. Since the change, that
has no longer happened.

Cheers,
Andy

On Thu, Jun 28, 2018 at 10:53 AM, Russ Housley <housley@vigilsec.com> wrote:

> Andy:
>
> My guess is that the DMARC change was not the reason for the improvement.
>
> See https://mailarchive.ietf.org/arch/msg/wgchairs/
> VMjHSHYvmCoxuTA4VChp-RwTsHk
>
> Russ
>
>
> On Jun 28, 2018, at 7:39 AM, Andrew G. Malis <agmalis@gmail.com> wrote:
>
> I just wanted to follow up to note that since this was put into place, I
> haven’t seen any false spam positives for email from IETF lists, where
> before i was seeing them almost daily. Great job!
>
> Thanks,
> Andy
>
>
> On Fri, May 11, 2018 at 8:00 AM, Alexey Melnikov <aamelnikov@fastmail.fm>
> wrote:
>
>> Hi,
>> Many of you have seen several long discussions thread about DMARC and how
>> it affects use of IETF/IRTF mailing lists.
>>
>> After testing DMARC workaround code written by Henrik Levkowetz on
>> several high volume IETF and IRTF mailing lists (e.g. CFRG, WebRTC, DMARC,
>> QUIC), the tools team and the IESG decided that Henrik's code should be
>> deployed for all IETF and IRTF mailing lists. In particular the workaround
>> allows people from DMARC p=reject domains to participate in IETF mailing
>> lists, as well as to avoid the problem of recipients being unsubscribed
>> from mailing lists. These 2 issues were the main reasons for developing the
>> DMARC workaround code..
>>
>> The workaround will be deployed today, May 11th.
>>
>>
>> Below are some technical details on how the email address rewriting
>> workaround is going to work:
>>
>> Emails from domains that don't have a p=reject DMARC setting are not
>> going to be affected in any way.
>>
>> For emails from p=reject domains:
>>
>> - The From header field of such emails will be rewritten to be under @
>> dmarc.ietf.org domain (which will have a p=none policy). For example, "
>> alexey@example.com" email address would become "alexey=
>> 40example.com@dmarc.ietf.org". The original From header field will be
>> preserved in the X-Original-From header field, which can be used for
>> automatic message processing by Sieve and Mail User Agents.
>>
>> Note that the mapping is reversible, so it is possible to send replies or
>> new messages to an original sender by sending them to the corresponding
>> mapped @dmarc.ietf.org email address.
>>
>> Best Regards,
>> Alexey
>>
>>
>
>