Re: [Uta] Comments on draft-ietf-uta-mta-sts-03

"John Levine" <johnl@taugh.com> Wed, 01 March 2017 04:55 UTC

Return-Path: <johnl@taugh.com>
X-Original-To: uta@ietfa.amsl.com
Delivered-To: uta@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D79B21294A2 for <uta@ietfa.amsl.com>; Tue, 28 Feb 2017 20:55:47 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.82
X-Spam-Level:
X-Spam-Status: No, score=-0.82 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, KHOP_DYNAMIC=1.08, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 75-TqY40ZnoH for <uta@ietfa.amsl.com>; Tue, 28 Feb 2017 20:55:47 -0800 (PST)
Received: from miucha.iecc.com (abusenet-1-pt.tunnel.tserv4.nyc4.ipv6.he.net [IPv6:2001:470:1f06:1126::2]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AF6C01294A0 for <uta@ietf.org>; Tue, 28 Feb 2017 20:55:46 -0800 (PST)
Received: (qmail 18044 invoked from network); 1 Mar 2017 04:55:44 -0000
Received: from unknown (64.57.183.18) by mail1.iecc.com with QMQP; 1 Mar 2017 04:55:44 -0000
Date: Wed, 01 Mar 2017 04:55:22 -0000
Message-ID: <20170301045522.1001.qmail@ary.lan>
From: John Levine <johnl@taugh.com>
To: uta@ietf.org
In-Reply-To: <813df83a-841e-4e6a-e3a1-f2852b20ddbc@bluepopcorn.net>
Organization:
X-Headerized: yes
Mime-Version: 1.0
Content-type: text/plain; charset="utf-8"
Content-transfer-encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/uta/nbl-D9Uq267XYkVuDYfjr7s5Ffc>
Cc: fenton@bluepopcorn.net
Subject: Re: [Uta] Comments on draft-ietf-uta-mta-sts-03
X-BeenThere: uta@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: UTA working group mailing list <uta.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/uta>, <mailto:uta-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/uta/>
List-Post: <mailto:uta@ietf.org>
List-Help: <mailto:uta-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/uta>, <mailto:uta-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 01 Mar 2017 04:55:48 -0000

In article <813df83a-841e-4e6a-e3a1-f2852b20ddbc@bluepopcorn.net> you write:
>3.1. MTA-STS TXT records
>
>There is no IANA registry for reserved hostnames, which is why protocols
>like SPF store their policies at the domain itself.

Urrgh.  SPF is as far as I know the only protocol published by the
IETF that stores policies at the unprefixed hostname, and that is
widely agreed to be a mistake.  DKIM and DMARC use prefixes.

There's the somewhat separate issue that if the prefixed name has to
be a hostname so it can be used in a URI, it can't contain an
underscore.

R's,
John

PS: Dave Crocker and I have been working on a prefix registry, but
it's a thankless task.