Re: Review of draft-kucherawy-dmarc-base-04

[[e-mail]]

> On 4/23/2014 11:28 AM, Pete Resnick wrote:
> > On 4/23/14 12:35 PM, Dave Crocker wrote:
> >> On 4/22/2014 5:30 PM, Martin Rex wrote:
> >>> RFC5322.From might contain no DNS domain to begin with.
> >> So a From: field address with no domain name has never been valid for
> >> "Internet" email.
> >
> > Well, except http://tools.ietf.org/html/rfc6854

Pete's right; I forgot about this update.

> You seem to be saying that that doc counters my assertion.

It does. RFC 6854 changes the syntax of From: header fields to allow an
address-list. The ABNF from there is:

  address-list    =   (address *("," address)) / obs-addr-list

  address         =   mailbox / group

  group           =   display-name ":" [group-list] ";" [CFWS]

Note that group list is optional, so something like:

  From: group: ;

is now legal. In fact RFC 6854 contains this example:

  From: Nightly Monitor Robot:;

I don't see a domain in there. Do you? I note that RFC 6854 exists precisly
because of the legitimate applications I've been talking about that need a way
to generate a legitimate message.

And IMO DMARC needs to take such usage into account.

				Ned