IETF Logo Mail Archive

Re: Suggestion: can we test DMARC deployment with a mailing list?

"John Levine" <johnl@taugh.com> Fri, 02 May 2014 21:13 UTC

Return-Path: <johnl@iecc.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6C6DB1A0A7B for <ietf@ietfa.amsl.com>; Fri, 2 May 2014 14:13:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 1.542
X-Spam-Level: *
X-Spam-Status: No, score=1.542 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HELO_MISMATCH_COM=0.553, HOST_MISMATCH_NET=0.311, SPF_NEUTRAL=0.779] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xQvcoL2lMo_Y for <ietf@ietfa.amsl.com>; Fri, 2 May 2014 14:13:46 -0700 (PDT)
Received: from miucha.iecc.com (abusenet-1-pt.tunnel.tserv4.nyc4.ipv6.he.net [IPv6:2001:470:1f06:1126::2]) by ietfa.amsl.com (Postfix) with ESMTP id 29F621A091A for <ietf@ietf.org>; Fri, 2 May 2014 14:13:45 -0700 (PDT)
Received: (qmail 67213 invoked from network); 2 May 2014 21:13:41 -0000
Received: from miucha.iecc.com (64.57.183.18) by mail1.iecc.com with QMQP; 2 May 2014 21:13:41 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding; s=13d41.53640a85.k1405; i=johnl@user.iecc.com; bh=xn9MCBTJjk1ZujK8BZlOgUoIlCde1hXEdFeqo4XAzbw=; b=mQy9d3/G8w1PWAaj60CxxP8Nx45NgStieZKyx7upAM5xeNfkzSA4RDyvUYJPTJH5bofe63MdEo8d6E6QMYf6C2kr6Y3XNs4KcCk9xHK3GOe+TC7s4vksb/5UHzVx1L5TDKnjtopY8IFtLrqY7IFsvaGLXjHBxmjKNiSPs+VLerU7wyqhhjI2g1c62JCJeEfoHfls40Pioek73pt77YL2W8Hfb8uwc/v1b3onnTpmQLLxkih6lZrQkLZSjVSkwaV8
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=taugh.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding; s=13d41.53640a85.k1405; olt=johnl@user.iecc.com; bh=xn9MCBTJjk1ZujK8BZlOgUoIlCde1hXEdFeqo4XAzbw=; b=aCXqdhoRq+54zvEHfIq5FHSouKZcR6uzULqcJT0ZTRQVzGZUH6xmwLvzB6HCjB1AlOWNKX4kgnUgy84NqiVWtgFMxbNaxKpJBvqXWjQRNbjNxnkYMZTo0FFR4x94q+PN9bPymERgKUTH7NTMNJrmvRm7T7uEcYjWcV1zo3gA61RrICIsx559I+tr55mFq8UheIHY+KqOQK1dCxwTEFPtf7Sp8b0czhW4WeIrpqriyKTN7dQePWUrnhETIBGYQkAg
Date: Fri, 02 May 2014 21:13:17 -0000
Message-ID: <20140502211317.81216.qmail@joyce.lan>
From: John Levine <johnl@taugh.com>
To: ietf@ietf.org
Subject: Re: Suggestion: can we test DMARC deployment with a mailing list?
In-Reply-To: <28671EE8-A8B9-40D1-9268-527A8FFC34AD@cisco.com>
Organization:
X-Headerized: yes
Mime-Version: 1.0
Content-type: text/plain; charset="utf-8"
Content-transfer-encoding: 8bit
Archived-At: http://mailarchive.ietf.org/arch/msg/ietf/XByip187Q5p6eRRfbHtOWnSTEy4
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 02 May 2014 21:13:47 -0000

>We have been having a fairly extended discussion, much of which seems hypothetical -
>“I don’t like DEMARC because I am worried that ... with mailing lists”. I wonder if we
>could take a moment to try it and see what happens?

We've been running that experiment for at least a year.  Surprise!

Until a month ago, nobody noticed because there was, as far as I can
tell, only one person (at Linkedin) posting from a domain with a DMARC
policy.

Then the during April, both Yahoo and AOL published DMARC reject
policies, to try and mitigate their own problems after their
respective security breaches, with the bad effects we've seen.  Every
time someone posts to a list from an AOL or Yahoo address, we're
running that experiment whether we like it or not.

R's,
John

v2.23.0 | Report a Bug | By Email