(DMARC) Why mailing lists are only sort of special

"John R Levine" <johnl@taugh.com> Wed, 16 April 2014 02:18 UTC

Return-Path: <johnl@taugh.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A55FB1A0034 for <ietf@ietfa.amsl.com>; Tue, 15 Apr 2014 19:18:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 2.943
X-Spam-Level: **
X-Spam-Status: No, score=2.943 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HELO_MISMATCH_COM=0.553, HOST_MISMATCH_NET=0.311, J_CHICKENPOX_14=0.6, SPF_NEUTRAL=0.779] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id c3V5y8InFSp6 for <ietf@ietfa.amsl.com>; Tue, 15 Apr 2014 19:18:32 -0700 (PDT)
Received: from miucha.iecc.com (abusenet-1-pt.tunnel.tserv4.nyc4.ipv6.he.net [IPv6:2001:470:1f06:1126::2]) by ietfa.amsl.com (Postfix) with ESMTP id 6AD491A00B0 for <ietf@ietf.org>; Tue, 15 Apr 2014 19:18:31 -0700 (PDT)
Received: (qmail 24494 invoked from network); 16 Apr 2014 02:18:27 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com; h=date:message-id:from:to:subject:in-reply-to:references:mime-version:content-type:user-agent:cleverness; s=5fad.534de873.k1404; bh=YphY30qnr67+yJUlU7O9pJbiPHdOBSpzmmR3qtkOtHM=; b=Tc5aLxD2Xc9d6YlaJ7COXUaIE4/ql/vXBKtSsucsR7ezSkVtik7nc73qfLU+9ZJgFgYqeDOgohn2thYPRz4eVTG5NkpORvOt8VBA8LVD5jem6XAWH3IjrPdlcdTP7C54jc5Hk7qdGozLEDqmKxxIzXmkcGlcLO8/5okqpLodqdQWku/EiVxU2tF1ZJLikU3juEoiisj5Wdbk2kxljr6f/IpVoJjGN4sdl2BAzTVeKMlSje9OAKNAAyaPfCo4JKKt
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=taugh.com; h=date:message-id:from:to:subject:in-reply-to:references:mime-version:content-type:user-agent:cleverness; s=5fad.534de873.k1404; bh=YphY30qnr67+yJUlU7O9pJbiPHdOBSpzmmR3qtkOtHM=; b=eqFn6waY5myFsgm7Gv8WG6xD4R08S5xRNdpF7fOgaDX1sgCsOy8Ec4p7HJf21wDCdHgOO5AhV+ZOYFOJgzvUpTHEki6u6qInoUU76e2L/Pi2e+c4TgeVSfcomVHfMeOW3O2QdFwoaHwm8G7SFfezKnbcxldV+bcVeByOIHfo9nUxCJ+6meVWSkUPrML5aCmGCqD3TKba5ISPuiDXmX6kXLuhsOgNQs8ZxQNmXPKB3EAzCKWnVW3SCYIZ7dDRqtHh
Received: from localhost ([IPv6:2001:470:1f07:1126::78:696d:6170]) by imap.iecc.com ([IPv6:2001:470:1f07:1126::78:696d:6170]) with ESMTPS (TLS1.0/X.509/SHA1) via TCP6; 16 Apr 2014 02:18:26 -0000
Date: Tue, 15 Apr 2014 22:18:26 -0400
Message-ID: <alpine.BSF.2.00.1404151832460.38826@joyce.lan>
From: John R Levine <johnl@taugh.com>
To: "ietf@ietf.org" <ietf@ietf.org>
Subject: (DMARC) Why mailing lists are only sort of special
In-Reply-To: <CAL0qLwbPMm_i0fqNSGQPv=xZaiNASy=icsRNudaNJ_3PNtX3Og@mail.gmail.com>
References: <CE39F90A45FF0C49A1EA229FC9899B0507D45766@USCLES544.agna.amgreetings.com> <20140414214949.32126.qmail@joyce.lan> <CE39F90A45FF0C49A1EA229FC9899B0507D460CB@USCLES544.agna.amgreetings.com> <alpine.BSF.2.00.1404142150430.32657@joyce.lan> <CAL0qLwbPMm_i0fqNSGQPv=xZaiNASy=icsRNudaNJ_3PNtX3Og@mail.gmail.com>
User-Agent: Alpine 2.00 (BSF 1167 2008-08-23)
Cleverness: None detected
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; format="flowed"; charset="US-ASCII"
Archived-At: http://mailarchive.ietf.org/arch/msg/ietf/Onvufv1kugK6uYTv6_PNeON3LgI
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 16 Apr 2014 02:18:37 -0000

Murray asked a couple of interesting questions, which I will address 
separately in separate message threads.

To the question why are mailing lists special, they're somewhat special, 
but they're more interesting here as canaries in the coal mine.

As a rough estimate, roughly 90% of e-mail is spam, most of what's left is 
bulk broadcast mail, most of what's left after that is transactional 
sort-of-broadcast mail, and the little bit at the end is discussion lists, 
individual mail, and some miscellaneous other stuff.  Nonetheless, people 
have consistently said that they want to get their individual mail, and 
don't care about the broadcast mail.  I'm not aware of surveys where they 
ask specifically about discussion lists, but since each message is 
generally hand written by an identifiable person, I'd expect people to 
consider it a lot closer to individual mail than the daily blast from 
BigCo.

So mailing list mail is special for the same reason individual mail is 
special--it's the mail people want.

The reason it's not special is that it's just the most visible example of 
a wide variety of legitimate useful mail that DMARC can't describe, and 
that are broken by DMARC policies other than p=none.

For example, I send and receive my Yahoo mail on my Gmail account, and 
have done so for years.  Gmail makes the obvious checks to ensure that 
it's my account, so it's just as secure as sending from Yahoo, and it's 
useful.  Or it was useful until last weekend. Now a lot of it bounces.

Or there's the WSJ's mail an article feature.  It's useful, nobody abuses 
it.  Yahoo users can't use it any more.

There's lots of these, and the only thing "wrong" with them is that DMARC 
can't distinguish them from other somewhat similar mail sources that send 
spam.  The proposals I'm seeing from the DMARC cartel are basically Google 
Purge applied to e-mail:

http://www.theonion.com/articles/google-announces-plan-to-destroy-all-information-i,1783/

Surely we can do better than that, but that's the next message.

Regards,
John Levine, johnl@taugh.com, Taughannock Networks, Trumansburg NY
Please consider the environment before reading this e-mail.