IETF Logo Mail Archive

Re: DMARC from the perspective of the listadmin of a bunch of SMALL community lists

Hector Santos <hsantos@isdg.net> Mon, 28 April 2014 12:26 UTC

Return-Path: <hsantos@isdg.net>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7FAE11A09E6 for <ietf@ietfa.amsl.com>; Mon, 28 Apr 2014 05:26:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -99.301
X-Spam-Level:
X-Spam-Status: No, score=-99.301 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZhRT2MhoSQJD for <ietf@ietfa.amsl.com>; Mon, 28 Apr 2014 05:25:59 -0700 (PDT)
Received: from groups.winserver.com (listserv.winserver.com [208.247.131.9]) by ietfa.amsl.com (Postfix) with ESMTP id 730001A0710 for <ietf@ietf.org>; Mon, 28 Apr 2014 05:25:58 -0700 (PDT)
DKIM-Signature: v=1; d=isdg.net; s=tms1; a=rsa-sha1; c=simple/relaxed; l=1307; t=1398687950; h=Received:Received: Received:Received:Message-ID:Date:From:Organization:To:Subject: List-ID; bh=w7nfsJKBb6oddul+pnv+rIKdIcE=; b=HKXMIRx78xHJ9h8H2Saf nWRUJFxJPp/UumrR6Wzx0F5p6jThBB+gmGSpqntSJJO0wmmh1J/cm3iZA76WOuqo KxVHpBkv914wBnPhmtoc4x1PaDfffif32K+ZxrFODjh1QxM+dRN+XJVv1FMIFlL5 WnLX++E2j1lvQyybJ5o1+TA=
Received: by winserver.com (Wildcat! SMTP Router v7.0.454.4) for ietf@ietf.org; Mon, 28 Apr 2014 08:25:50 -0400
Authentication-Results: dkim.winserver.com; dkim=pass header.d=beta.winserver.com header.s=tms1 header.i=beta.winserver.com; adsp=pass policy=all author.d=isdg.net asl.d=beta.winserver.com;
Received: from beta.winserver.com (opensite.winserver.com [208.247.131.23]) by winserver.com (Wildcat! SMTP v7.0.454.4) with ESMTP id 1796514767.7985.2420; Mon, 28 Apr 2014 08:25:50 -0400
DKIM-Signature: v=1; d=beta.winserver.com; s=tms1; a=rsa-sha256; c=simple/relaxed; l=1307; t=1398687859; h=Received:Received: Message-ID:Date:From:Organization:To:Subject:List-ID; bh=VlhNrna Qjfp0OeHKukgY6/kGdAY2jTAdNx7+kHrsbTw=; b=OnZutmDUQvb89353xyP3fS6 Wb7Vf4n8n0qMJbcdMYHazlHrHClECODlKyKjHCB1TS4eAXQALaKvlBkRQmwjX8zE ZrN2Lv9yLeyHkgBM51gIcG8Zy0XvusOJQkILhyz+QfL8UrmqoF11vVi92WfYTVlp EcAW6cuqeabuYBrzifcU=
Received: by beta.winserver.com (Wildcat! SMTP Router v7.0.454.4) for ietf@ietf.org; Mon, 28 Apr 2014 08:24:19 -0400
Received: from [192.168.1.2] ([99.121.4.27]) by beta.winserver.com (Wildcat! SMTP v7.0.454.4) with ESMTP id 1816035375.9.1856; Mon, 28 Apr 2014 08:24:18 -0400
Message-ID: <535E48C7.7010600@isdg.net>
Date: Mon, 28 Apr 2014 08:25:43 -0400
From: Hector Santos <hsantos@isdg.net>
Organization: Santronics Software, Inc.
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.3.0
MIME-Version: 1.0
To: "Murray S. Kucherawy" <superuser@gmail.com>, Miles Fidelman <mfidelman@meetinghouse.net>
Subject: Re: DMARC from the perspective of the listadmin of a bunch of SMALL community lists
References: <20140425002622.E6DFA1ACE0@ld9781.wdf.sap.corp> <535A8A6F.3040903@meetinghouse.net> <CAL0qLwbLpaKXggK5EpF1XtDYXCvs9K5cqUHo-tDZQFN=TO6QYw@mail.gmail.com>
In-Reply-To: <CAL0qLwbLpaKXggK5EpF1XtDYXCvs9K5cqUHo-tDZQFN=TO6QYw@mail.gmail.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Archived-At: http://mailarchive.ietf.org/arch/msg/ietf/ah4bvVaBpH-dHpetvMRTJtfTDLE
Cc: ietf <ietf@ietf.org>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 28 Apr 2014 12:26:02 -0000

On 4/25/2014 12:32 PM, Murray S. Kucherawy wrote:
> On Fri, Apr 25, 2014 at 9:16 AM, Miles Fidelman
> <mfidelman@meetinghouse.net <mailto:mfidelman@meetinghouse.net>> wrote:
>
>     Thanks for the citation!  Also see below...
>
>
> I'm just curious: Is anyone on this thread a lawyer?
>
> -MSK

Murray,

You don't need to be a lawyer to understand one's ethical engineering 
obligations. Generally, it would the product development engineer that 
recognizes ethical design issues and product liability issues and it 
would be him/her that would bring a particular issue with their legal 
council.   There has been similar (mail blocks) court/lawsuits 
precedence for what has been described in this thread.

Keep in mind what DMARC purports to offer.  If someone intentionally 
and neglectfully ignores it knowing full well that it can be used as a 
highly reliable fraud detection mechanism which the domain owner has 
given you full authorization to apply ("reject"), if you don't, well, 
that will put you at risk -- despite local policy overrides. Don't let 
yourself hide behind local policy. It may ultimately excuse you with 
the changes in some laws in the past decade, but it won't eliminate 
you from risk.

---
Hector Santos/CTO
Santronics Software, Inc.
http://www.santronics.com

v2.23.0 | Report a Bug | By Email