Re: [Uta] draft-brotman-smtp-tlsrpt

"John Levine" <johnl@taugh.com> Sun, 01 May 2016 22:20 UTC

Return-Path: <johnl@taugh.com>
X-Original-To: uta@ietfa.amsl.com
Delivered-To: uta@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 82FCC12D1A8 for <uta@ietfa.amsl.com>; Sun, 1 May 2016 15:20:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M3YBQmYDnefc for <uta@ietfa.amsl.com>; Sun, 1 May 2016 15:19:58 -0700 (PDT)
Received: from miucha.iecc.com (abusenet-1-pt.tunnel.tserv4.nyc4.ipv6.he.net [IPv6:2001:470:1f06:1126::2]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F096912D124 for <uta@ietf.org>; Sun, 1 May 2016 15:19:57 -0700 (PDT)
Received: (qmail 66755 invoked from network); 1 May 2016 21:19:55 -0000
Received: from unknown (64.57.183.18) by mail1.iecc.com with QMQP; 1 May 2016 21:19:55 -0000
Date: Sun, 01 May 2016 21:19:33 -0000
Message-ID: <20160501211933.10596.qmail@ary.lan>
From: John Levine <johnl@taugh.com>
To: uta@ietf.org
In-Reply-To: <f560e7a9f4384a3293ae9f593c1563b5@COPDCEX19.cable.comcast.com>
Organization:
X-Headerized: yes
Mime-Version: 1.0
Content-type: text/plain; charset="utf-8"
Content-transfer-encoding: 8bit
Archived-At: <http://mailarchive.ietf.org/arch/msg/uta/TRR2vqFZ8kz2ozoXP85EyoRjOQw>
Cc: Alexander_Brotman@cable.comcast.com
Subject: Re: [Uta] draft-brotman-smtp-tlsrpt
X-BeenThere: uta@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: UTA working group mailing list <uta.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/uta>, <mailto:uta-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/uta/>
List-Post: <mailto:uta@ietf.org>
List-Help: <mailto:uta-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/uta>, <mailto:uta-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 01 May 2016 22:20:00 -0000

>We'd like others to review and encourage further discussion relating to these drafts.  Thank
>you for your time.

Reporting is an important part of the design and I'd like the WG to
adopt the draft.

Having said that, the draft is missing a lot of details on how the
reports are sent.  Fortunately, most of the details can be borrowed
from DMARC: the report is a file of JSON with a name created by a rule
combining the reporter, the recipient and a timestamp, compressed with
gzip and sent as an application/gzip attachment.  This is exactly like
DMARC, substituting JSON for XML.

DMARC originally had both http and mail reporting.  I noticed fairly
late in the process that the http reporting in the spec wouldn't
actually work, so either they should fix the spec or take it out.
Since nobody had done http reporting and nobody was planning to, they
took it out.  Same choice here: it'd be easy enough to fix the text
saying that the https reporting does a PUT of an application/gzip just
like the one that'd be attached to the mail, but unless someone has a
concrete plan to implement it, I'd take it out. 

R's,
John