Re: ugly hacks (was: Re: We are not a mail forwarding service)

John Levine <johnl@taugh.com> Sat, 21 May 2022 17:39 UTC

Return-Path: <johnl@iecc.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42593C2B71C9 for <ietf@ietfa.amsl.com>; Sat, 21 May 2022 10:39:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.848
X-Spam-Level:
X-Spam-Status: No, score=-1.848 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.248, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=iecc.com header.b=gmzQPqMV; dkim=pass (2048-bit key) header.d=taugh.com header.b=wqTKpm8J
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T-HjcXP50r0R for <ietf@ietfa.amsl.com>; Sat, 21 May 2022 10:39:17 -0700 (PDT)
Received: from gal.iecc.com (gal.iecc.com [IPv6:2001:470:1f07:1126:0:43:6f73:7461]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 74E4FC15EB2F for <ietf@ietf.org>; Sat, 21 May 2022 10:39:17 -0700 (PDT)
Received: (qmail 63164 invoked from network); 21 May 2022 17:39:14 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:cleverness; s=f6ba.628923c2.k2205; bh=5yUvSLor7rrDYb9WckgxwcQPkaMDS8lKLxkHbFRKOjY=; b=gmzQPqMVQukUJsd+kBJsfnfjzs5zzrkmVD9SNouOJxJR9iclgB1yqULW6D92b7oUj/V941ABLs4auInCJXwxYWVcQnd8FPrW2DtWUmJKs+OGqiL7O9F6UFA2JAZoqtlNjNCfjkYAdUg3KhN6gOFG1zIeng1toOYBksF0Rv6W7ONfZgg4PrQER/uaoYydmWZoQKcSKTAinGXhzxWKQr/ck7x79WLUTUyExYpWy8j+B47QyxXTuIZMLiN67yG9JOAis7Yt/G8pQYDEv2UEGVNfMMn824fAYPs3eZarGlmJmHdAofdiG8sPJiou0l9wxvcw4oS5zy33ORH2ooigDtElSg==
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=taugh.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:cleverness; s=f6ba.628923c2.k2205; bh=5yUvSLor7rrDYb9WckgxwcQPkaMDS8lKLxkHbFRKOjY=; b=wqTKpm8J9lmZDEZmuRl7gU/BUuEhMvRyNjxkekmzFZYQTybvhLmmy6D0Lej6hrhfbenC7ZZ4vq4uubBFYOwM9OZzBv0SuRCrwybJCfQvskG6FCX8chvKdKqNcZ8WGZNKSxhSZfNty0tBNTJynbxWm0wnIlSm5Dp0OM6wvb3n1sNxTm27jqIpcuyf7v4lX7EnbCSuorrGx3yRKutP77iMKiqkys5MFAsd9FV8PqlMYODtulqS36u2I1S42+sZMPIW+yDUDJInfMaIPy6Mz4RzmqzjxKrlpUm0IsoRFMvdbY9qg3TRyTx6Sx96GYI4d10D9ONIMkmxRedp5PcohBjzDg==
Received: from ary.qy ([IPv6:2001:470:1f07:1126::78:696d:6170]) by imap.iecc.com ([IPv6:2001:470:1f07:1126::78:696d:6170]) with ESMTPS (TLS1.3 ECDHE-RSA AES-256-GCM AEAD) via TCP6; 21 May 2022 17:39:14 -0000
Received: by ary.qy (Postfix, from userid 501) id 891774162D56; Sat, 21 May 2022 13:39:13 -0400 (EDT)
Date: Sat, 21 May 2022 13:39:13 -0400
Message-Id: <20220521173913.891774162D56@ary.qy>
From: John Levine <johnl@taugh.com>
To: ietf@ietf.org
Cc: moore@network-heretics.com
Subject: Re: ugly hacks (was: Re: We are not a mail forwarding service)
In-Reply-To: <ffcd3cdd-d0db-963f-b4e8-e2235f7de89f@network-heretics.com>
Organization: Taughannock Networks
X-Headerized: yes
Cleverness: minimal
Mime-Version: 1.0
Content-type: text/plain; charset="utf-8"
Content-transfer-encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/iPRH173E1hgMUsq_MwSz32YcVqQ>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 21 May 2022 17:39:22 -0000

It appears that Keith Moore  <moore@network-heretics.com> said:
>> Beyond that, we already have the revsrsible address rewriting hack I 
>> invented for the mailing lists which turns steve@aol.com into 
>> steve=40aol.com@dmarc.ietf.org.  It's ugly but it works and it is 
>> simple enough that you can undo it in procmail as you deliver your own 
>> mail.
>
>Every deployed hack (including NAT) is ugly but "works" in isolation, 
>provided you only consider the use cases you care about.   It's when 
>multiple hacks (each with limited applicability) are layered that the 
>problems crop up.   And yet, quite often the proposed solutions are to 
>add more ugly hacks that are themselves of limited applicability.

I've been using this hack on my own mailing lists since 2015.
If it were breaking other things, we'd probably know by now.

As I said a couple of messages back, I am not thrilled about the way
large (and some small) mail systems are using DMARC on mail for which
it was not intended, but it's not going away and this is the least bad
way we know to route around this particular damage.

R's,
John