Re: What I've been wondering about the DMARC problem

Miles Fidelman <mfidelman@meetinghouse.net> Tue, 15 April 2014 04:07 UTC

Return-Path: <mfidelman@meetinghouse.net>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A60ED1A031F for <ietf@ietfa.amsl.com>; Mon, 14 Apr 2014 21:07:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.881
X-Spam-Level:
X-Spam-Status: No, score=-0.881 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MISSING_HEADERS=1.021, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 53nfibOSteU0 for <ietf@ietfa.amsl.com>; Mon, 14 Apr 2014 21:07:50 -0700 (PDT)
Received: from server1.neighborhoods.net (server1.neighborhoods.net [207.154.13.48]) by ietfa.amsl.com (Postfix) with ESMTP id 803371A02FF for <ietf@ietf.org>; Mon, 14 Apr 2014 21:07:50 -0700 (PDT)
Received: from localhost (localhost.localdomain [127.0.0.1]) by server1.neighborhoods.net (Postfix) with ESMTP id A79C8CC0C8 for <ietf@ietf.org>; Tue, 15 Apr 2014 00:07:47 -0400 (EDT)
X-Virus-Scanned: by amavisd-new-2.6.2 (20081215) (Debian) at neighborhoods.net
Received: from server1.neighborhoods.net ([127.0.0.1]) by localhost (server1.neighborhoods.net [127.0.0.1]) (amavisd-new, port 10024) with LMTP id HO0MS7nXlEGG for <ietf@ietf.org>; Tue, 15 Apr 2014 00:07:39 -0400 (EDT)
Received: from Miles-Fidelmans-MacBook-Pro.local (pool-173-76-155-14.bstnma.fios.verizon.net [173.76.155.14]) by server1.neighborhoods.net (Postfix) with ESMTPSA id B9B9ACC0CD for <ietf@ietf.org>; Tue, 15 Apr 2014 00:07:38 -0400 (EDT)
Message-ID: <534CB08A.8080802@meetinghouse.net>
Date: Tue, 15 Apr 2014 00:07:38 -0400
From: Miles Fidelman <mfidelman@meetinghouse.net>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:28.0) Gecko/20100101 Firefox/28.0 SeaMonkey/2.25
MIME-Version: 1.0
CC: IETF Discussion <ietf@ietf.org>
Subject: Re: What I've been wondering about the DMARC problem
References: <53499A5E.9020805@meetinghouse.net> <5349A261.9040500@dcrocker.net> <5349AE35.2000908@meetinghouse.net> <5349BCDA.7080701@gmail.com> <01P6L9JZF5SC00004W@mauve.mrochek.com> <CAKW6Ri5f5KZyJeL7RTG2T000Qd+t61KCofNmG2JZv+nKi94Uug@mail.gmail.com> <534C0078.3070808@meetinghouse.net> <CAKW6Ri6OUmxGaBOGR2hoWpDOGWsVQ9tQ2Q9ogkT5wzFhFJLBbQ@mail.gmail.com> <534C2262.1070507@meetinghouse.net> <CAL0qLwb5p_V3i-NGhKJZBeO0qKHm1xiAq1E3nYkBzVUAXkRPpQ@mail.gmail.com> <CAKW6Ri5HWMaGMa_oLKwq5fzSUzJG=jAL1qojY1i6_tibEAxq8w@mail.gmail.com> <CAL0qLwaik1ft+AcACoc+kvKtCRt_gGvM6ov7c2yj_Uwyy3drNw@mail.gmail.com> <CAKW6Ri5_=GyOQijZMM+mqAoaEQzePGysBy9WVjN9yHO1zf3d2w@mail.gmail.com> <534C8F2B.9060903@gmail.com> <CADnDZ8-DWU3ZE_WZO3vwBWvYtNZacdN9mDUof0jmfu2uKZ2poQ@mail.gmail.com>
In-Reply-To: <CADnDZ8-DWU3ZE_WZO3vwBWvYtNZacdN9mDUof0jmfu2uKZ2poQ@mail.gmail.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Archived-At: http://mailarchive.ietf.org/arch/msg/ietf/b0CdjibFrsnhOOgg8MaNgVsFq5Q
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Apr 2014 04:07:51 -0000

Important business users, with Yahoo accounts?  Is that a joke?

Just as a reference point:
- I just logged into my long-unused, and un-publicized yahoo email 
account - and the only thing there is Spam
- the lion's share of mail that comes from yahoo, to my normal account, 
is spam
- unfortunately, a good number of people on the email lists that I run 
seem to have Yahoo mail accounts - and a good amount of the mail that 
comes from those accounts is... you guessed it... spam - because yahoo 
email accounts seem to be vulnerable to cracking and exploitation

So, just who is it that Yahoo is protecting here?

Abdussalam Baryun wrote:
> The standard procedure in many companies is business scoped, so they 
> identify important business users and the business returns/damages. 
> Most important users are not IT experts, and use email for personal 
> exchange. Yahoo has signed an agreement with users to protect its 
> information system, so all seem to follow that, and all users are free 
> to stop using services or not.
>
> AB
>
> On Tuesday, April 15, 2014, Brian E Carpenter wrote:
>
>     I thought that standard operating procedure in the IT industry
>     was: if you roll something out and it causes serious breakage to
>     some of your users, you roll it back as soon as possible.
>
>     Why hasn't Yahoo rolled back its 'reject' policy by now?
>
>     Regards
>        Brian
>


-- 
In theory, there is no difference between theory and practice.
In practice, there is.   .... Yogi Berra