Re: [spfbis] [meta-issue] Mis-use of MAIL FROM for list authentication
Dave Crocker <dhc@dcrocker.net> Wed, 04 May 2016 20:14 UTC
Return-Path: <dhc@dcrocker.net>
X-Original-To: spfbis@ietfa.amsl.com
Delivered-To: spfbis@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1])
by ietfa.amsl.com (Postfix) with ESMTP id 9C94412D5DE
for <spfbis@ietfa.amsl.com>; Wed, 4 May 2016 13:14:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level:
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5
tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3]
autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44])
by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 7dSHrJLPHs72 for <spfbis@ietfa.amsl.com>;
Wed, 4 May 2016 13:14:04 -0700 (PDT)
Received: from sbh17.songbird.com (sbh17.songbird.com [72.52.113.17])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by ietfa.amsl.com (Postfix) with ESMTPS id 9FB3312D551
for <spfbis@ietf.org>; Wed, 4 May 2016 13:14:04 -0700 (PDT)
Received: from [192.168.1.168] (76-218-8-128.lightspeed.sntcca.sbcglobal.net
[76.218.8.128]) (authenticated bits=0)
by sbh17.songbird.com (8.13.8/8.13.8) with ESMTP id u44KDhQt002397
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT);
Wed, 4 May 2016 13:13:43 -0700
To: S Moonesamy <sm+ietf@elandsys.com>, Stuart Gathman <stuart@gathman.org>,
spfbis@ietf.org
References: <572A33F3.7070100@gathman.org>
<6.2.5.6.2.20160504112048.1004b960@resistor.net>
From: Dave Crocker <dhc@dcrocker.net>
Organization: Brandenburg InternetWorking
Message-ID: <572A57EF.9060906@dcrocker.net>
Date: Wed, 4 May 2016 13:13:35 -0700
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:38.0) Gecko/20100101
Thunderbird/38.7.2
MIME-Version: 1.0
In-Reply-To: <6.2.5.6.2.20160504112048.1004b960@resistor.net>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 7bit
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.0
(sbh17.songbird.com [72.52.113.17]); Wed, 04 May 2016 13:13:46 -0700 (PDT)
Archived-At: <http://mailarchive.ietf.org/arch/msg/spfbis/4Jna3keRU1W8FsmxisL5Ka-pUnU>
Subject: Re: [spfbis] [meta-issue] Mis-use of MAIL FROM for list authentication
X-BeenThere: spfbis@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
Reply-To: dcrocker@bbiw.net
List-Id: SPFbis discussion list <spfbis.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spfbis>,
<mailto:spfbis-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spfbis/>
List-Post: <mailto:spfbis@ietf.org>
List-Help: <mailto:spfbis-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spfbis>,
<mailto:spfbis-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 May 2016 20:14:06 -0000
Never one to consider the obvious as above mentioning, but I do appreciate the irony of this (frankly entirely valid 0complaint, given the nature of SPF's basic authentication premise... d/ On 5/4/2016 11:29 AM, S Moonesamy wrote: > Hi Stuart, > At 10:40 04-05-2016, Stuart Gathman wrote: >> When I post to the spfbis mailing list, I have to confirm my posting, >> as the list uses MAIL FROM to identify the poster, and my MAIL FROM is >> variable to make it signed and possible to validate: >> >> Return-Path: >> <mailto:SRS0=42CRp=Q5==stuart@gathman.org><SRS0=42CRp=Q5==stuart@gathman.org> >> >> >> However, the list *should* be looking at the From: header, which is >> also signed and validated by ietf: > > I am one of the list moderators for this mailing list. The above is > about an operational issue. I can enquire about the issue or you, or > anyone else, could send an email to ietf-action@ietf.org to enquire [1] > about this issue. > > Regards, > S. Moonesamy > > 1. http://www.ietf.org/contact.html > _______________________________________________ > spfbis mailing list > spfbis@ietf.org > https://www.ietf.org/mailman/listinfo/spfbis > -- Dave Crocker Brandenburg InternetWorking bbiw.net
- [spfbis] [meta-issue] Mis-use of MAIL FROM for li… Stuart Gathman
- Re: [spfbis] [meta-issue] Mis-use of MAIL FROM fo… S Moonesamy
- Re: [spfbis] [meta-issue] Mis-use of MAIL FROM fo… Dave Crocker