Re: DMARC and yahoo

"Rolf E. Sonneveld" <R.E.Sonneveld@sonnection.nl> Mon, 21 April 2014 21:07 UTC

Return-Path: <R.E.Sonneveld@sonnection.nl>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 595501A0296 for <ietf@ietfa.amsl.com>; Mon, 21 Apr 2014 14:07:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level:
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Sju0RbNKI90T for <ietf@ietfa.amsl.com>; Mon, 21 Apr 2014 14:07:44 -0700 (PDT)
Received: from mx10.mailtransaction.com (mx10.mailtransaction.com [88.198.59.241]) by ietfa.amsl.com (Postfix) with ESMTP id 6694B1A028E for <ietf@ietf.org>; Mon, 21 Apr 2014 14:07:44 -0700 (PDT)
Received: from mx24.mailtransaction.com (mx21.mailtransaction.com [78.46.16.236]) by mx10.mailtransaction.com (Postfix) with ESMTP id 3gCL8V48jQz5Mh9k; Mon, 21 Apr 2014 23:07:38 +0200 (CEST)
Received: from jaguar.sonnection.nl (D57E1702.static.ziggozakelijk.nl [213.126.23.2]) by mx24.mailtransaction.com (Postfix) with ESMTP id 3gCL8V2k4Hz1L8cK; Mon, 21 Apr 2014 23:07:38 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1]) by jaguar.sonnection.nl (Postfix) with ESMTP id F1CCC12316E; Mon, 21 Apr 2014 23:07:37 +0200 (CEST)
X-Virus-Scanned: amavisd-new at sonnection.nl
Received: from jaguar.sonnection.nl ([127.0.0.1]) by localhost (jaguar.sonnection.nl [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id 42KjBsLBRdQC; Mon, 21 Apr 2014 23:07:31 +0200 (CEST)
Received: from [192.168.1.49] (unknown [192.168.1.49]) by jaguar.sonnection.nl (Postfix) with ESMTPSA id C7DA2122EB0; Mon, 21 Apr 2014 23:07:30 +0200 (CEST)
Message-ID: <53558891.5080503@sonnection.nl>
Date: Mon, 21 Apr 2014 23:07:29 +0200
From: "Rolf E. Sonneveld" <R.E.Sonneveld@sonnection.nl>
Organization: Sonnection B.V.
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.4.0
MIME-Version: 1.0
To: Douglas Otis <doug.mtview@gmail.com>
Subject: Re: DMARC and yahoo
References: <20140421163621.29166.qmail@joyce.lan> <53554A7B.20006@dcrocker.net> <5A812333-040A-4EF0-946A-8996D2E4B7EB@gmail.com>
In-Reply-To: <5A812333-040A-4EF0-946A-8996D2E4B7EB@gmail.com>
Content-Type: multipart/alternative; boundary="------------030000040900080902030108"
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=sonnection.nl; s=2009; t=1398114458; bh=Xazu/kPp0qe3lw6/n5pd1BMKV2FPkD8MFtMXWhKZu/4=; h=Message-ID:Date:From:To:Subject:From; b=ghI76bvT0Zf8S8L4/9IRpzMLOckvFMA38YZyOhch+Lu0wMqcWBe30zCFyGolGsaCQ A87MlZAjr8DfOfrghyXAdYv5LPuK/OEuUnWEK91TBP9jWRHGTiCNsS7IbRIUi7zM1Y NsHSHHyb0/4rXBI61YY9qU+ANko8r9kXLhJIP/xU=
DKIM-Filter: OpenDKIM Filter v2.8.2 mx10.mailtransaction.com 3gCL8V48jQz5Mh9k
Archived-At: http://mailarchive.ietf.org/arch/msg/ietf/ZoU1ShpRiDdjweWOS-2pY8n4UTM
Cc: John Levine <johnl@taugh.com>, dcrocker@bbiw.net, ietf@ietf.org
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: R.E.Sonneveld@sonnection.nl
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 21 Apr 2014 21:07:49 -0000

Hi, Doug,

On 04/21/2014 09:20 PM, Douglas Otis wrote:
>
> On Apr 21, 2014, at 9:42 AM, Dave Crocker <dhc@dcrocker.net 
> <mailto:dhc@dcrocker.net>> wrote:
>
>> On 4/21/2014 9:36 AM, John Levine wrote:
>>> They could fix it if they
>>> wanted, e.g., by arranging to whitelist mail sources that don't match
>>> DMARC's authentication model but send mail people want.  This is not
>>> just mailing lists, of course.
>>
>>
>> Sorry, but I'm not quite understanding what additional mechanism you 
>> have in mind.
>>
>> Exactly who does exactly what?
>>
>> Who has to adopt it?
>>
>> How will it scale?
>
> Dear Dave,
>
> Each domain can simply point to their desired white-list. This can be 
> one published directly or simply referenced as described in:
>
> http://tools.ietf.org/html/draft-otis-dkim-tpa-label-06#page-8
>
> This has elements from the moribund ADSP.  The sender wishing to 
> protect a domain while also applying policy like that of ADSP or DMARC 
> can offer receivers a rapid and scalable method to check third-party 
> domain authorizations.  This means senders are always able to defend 
> recipients who trust messages from their domain.  Please note, 
> authorizations can also require presence of a List-ID.

This doesn't answer Dave's questions: who has to adopt it and how will 
it scale.

Adoption: of course the owner of the sending domain has to adopt it, but 
is there also a role for the owners of mailing lists, invite services 
etc.? How will the sending domain ever know whether a mailing list is 
open or closed for example? How will it know which invite services will 
need a TPA exemption?

Scaling: how does the owner of the sending domain (potentially very 
large numbers of users) know to what mailing lists its users are 
subscribed, what invite services will potentially need this TPA 
authorization etc.? Furthermore, will it scale if mailing lists can be 
members of mailing lists and how will the sending domain know about this 
hierarchy or chain of mailing lists? So the technical howto might be the 
easy part of the solution, while the organizational howto will 
definitely be the difficult part...

/rolf