[dmarc-ietf] Re: I-D Action: draft-ietf-dmarc-dmarcbis-31.txt

2024-05-20 Thread Todd Herr
also available by rsync at: > rsync.ietf.org::internet-drafts > > > ___ > I-D-Announce mailing list -- i-d-annou...@ietf.org > To unsubscribe send an email to i-d-announce-le...@ietf.org > -- Todd Herr | Technical Director, S

Re: [dmarc-ietf] Intent To Produce DMARCbis rev -31 - Request for Discussion Pause

2024-04-26 Thread Todd Herr
On Mon, Apr 22, 2024 at 10:01 AM Todd Herr wrote: > Colleagues, > > I intend to produce the next draft of DMARCbis this week, incorporating as > best as I can all the parallel threads that have spun up since WGLC was > called. > > In order for me to be most effective i

[dmarc-ietf] Intent To Produce DMARCbis rev -31 - Request for Discussion Pause

2024-04-22 Thread Todd Herr
is published, as the editing process suffers when the target keeps moving. Thank you for your consideration in this matter. -- Todd Herr | Technical Director, Standards & Ecosystem Email: todd.h...@valimail.com Phone: 703-220-4153 This email and all data transmitted with it contains confiden

Re: [dmarc-ietf] Thoughts on choosing N

2024-04-17 Thread Todd Herr
published for any specific domain used as the RFC5322.From domain, so perhaps a bit of text in the Tree Walk section describing the really deep use case and the solution for it might be a compromise. -- Todd Herr | Technical Director, Standards & Ecosystem Email: todd.h...@valimail.co

Re: [dmarc-ietf] Description of 'n' value for the 'psd' tag AND/OR Clarify the Tree Walk

2024-04-17 Thread Todd Herr
On Wed, Apr 17, 2024 at 1:18 AM Neil Anuskiewicz wrote: > > > On Apr 16, 2024, at 2:18 PM, Todd Herr 40valimail@dmarc.ietf.org> wrote: > >  > Colleagues, > > DMARCbis currently describes the value of 'n' for the 'psd' tag in a > policy record as follow

[dmarc-ietf] Description of 'n' value for the 'psd' tag AND/OR Clarify the Tree Walk

2024-04-16 Thread Todd Herr
Walk in section 4.6 be updated, to mention that valid DMARC records with no explicit psd tag might be found during the walk, and these should be preserved for later comparison to determine the organizational domain? I look forward to the discussion. -- Todd Herr | Technical Director, Stand

Re: [dmarc-ietf] Thoughts on choosing N

2024-04-16 Thread Todd Herr
se regardless of where we land on N for the tree walk, I think the description of the value of 'n' for the 'psd' tag is inadequate, a conclusion I've arrived at during the writing of this reply. -- Todd Herr | Technical Director, Standards & Ecosystem Email: todd.h...@valimail.com Phone

Re: [dmarc-ietf] Thoughts on choosing N

2024-04-15 Thread Todd Herr
ot only accommodate for current usage but also to allow for a bit of future expansion of the depth of the name space used for RFC5322.From domains. -- Todd Herr | Technical Director, Standards & Ecosystem Email: todd.h...@valimail.com Phone: 703-220-4153 This email and all data transmit

[dmarc-ietf] DMARCbis WGLC - Issue 144 Mention of ARC in DMARCbis

2024-04-01 Thread Todd Herr
m X is [ARC], which provides for a mechanism to demonstrate 'chain-of-custody' of a message. However, use of ARC is nascent, as is industry experience with it in connection with DMARC." https://github.com/ietf-wg-dmarc/draft-ietf-dmarc-dmarcbis/issues/144 -- Todd Herr | Technical Dir

[dmarc-ietf] DMARCbis WGLC - Issue 143 Blank's "Contentious Issues"

2024-04-01 Thread Todd Herr
dmarc/draft-ietf-dmarc-dmarcbis/issues/143 -- Todd Herr | Technical Director, Standards & Ecosystem Email: todd.h...@valimail.com Phone: 703-220-4153 This email and all data transmitted with it contains confidential and/or proprietary information intended solely for the use of individual(s) a

[dmarc-ietf] DMARCbis WGLC - Issue 142 - Fenton Review of DMARCbis rev-30

2024-04-01 Thread Todd Herr
Greetings. Jim Fenton's message kicking off the thread <https://mailarchive.ietf.org/arch/msg/dmarc/zwZtb3w4mD87OcFaOh_nCyREBPM/> "WGLC review of draft-ietf-dmarc-dmarcbis-30" has been captured as Issue 142 - https://github.com/ietf-wg-dmarc/draft-ietf-dmarc-dmarcbis/issues/142

[dmarc-ietf] DMARCbis WGLC - Issue 141 DMARC and What To Say About SPF -all

2024-04-01 Thread Todd Herr
Greetings. Issue 141 has been opened to collect ideas around the discussion about what to say in DMARCbis (if anything) about honoring SPF records that end in -all when SPF fails. https://github.com/ietf-wg-dmarc/draft-ietf-dmarc-dmarcbis/issues/141 -- Todd Herr | Technical Director

[dmarc-ietf] DMARCbis WGLC - Issue 140 Blank Editorial Review

2024-04-01 Thread Todd Herr
rcbis/issues/140 -- Todd Herr | Technical Director, Standards & Ecosystem Email: todd.h...@valimail.com Phone: 703-220-4153 This email and all data transmitted with it contains confidential and/or proprietary information intended solely for the use of individual(s) authorized to receive it. If you

Re: [dmarc-ietf] SPF follies, WGLC editorial review of draft-ietf-dmarc-dmarcbis-30

2024-04-01 Thread Todd Herr
On Mon, Apr 1, 2024 at 12:53 PM Jim Fenton wrote: > On 1 Apr 2024, at 9:26, Todd Herr wrote: > > > I'm digesting the threads for the purpose of preparing tickets to track > the > > work, and I suspect one of the tickets will include, "Add reference to > the >

Re: [dmarc-ietf] SPF follies, WGLC editorial review of draft-ietf-dmarc-dmarcbis-30

2024-04-01 Thread Todd Herr
fault/files/m3aawg_managing-spf_records-2017-08.pdf 2. https://www.m3aawg.org/sites/default/files/m3aawg-email-authentication-recommended-best-practices-09-2020.pdf -- Todd Herr | Technical Director, Standards & Ecosystem Email: todd.h...@valimail.com Phone: 703-220-4153 This

Re: [dmarc-ietf] DMARC result for DKIM testing and policy

2024-03-21 Thread Todd Herr
On Thu, Mar 21, 2024 at 10:15 AM Todd Herr wrote: > On Thu, Mar 21, 2024 at 5:55 AM Alessandro Vesely wrote: > >> On Wed 20/Mar/2024 23:11:20 +0100 Matthäus Wander wrote: >> > Alessandro Vesely wrote on 2024-03-20 15:42: >> >> what is the result of DMARC on

Re: [dmarc-ietf] DMARC result for DKIM testing and policy

2024-03-21 Thread Todd Herr
ot; result, and <#section-4.1-4.1.1> 2. produces that result based on an identifier that is in alignment, as described in Section 4.4 <#identifier-alignment-explained>. === If there's anything to say about reporting a

Re: [dmarc-ietf] General Purpose Domain

2024-03-18 Thread Todd Herr
Issue 137 has been opened for this. On Mon, Mar 18, 2024 at 9:50 AM Todd Herr wrote: > On Sun, Mar 17, 2024 at 7:17 AM Alessandro Vesely wrote: > >> On Sat 16/Mar/2024 21:07:53 +0100 Neil Anuskiewicz wrote: >> > Unless I’m misunderstanding, a General Purpose Domain is

Re: [dmarc-ietf] DMARCbis WGLC Issue - Section 11.5

2024-03-18 Thread Todd Herr
> number of > > Author Domains processed will avoid this risk. If not all Author Domains > > are processed, then the DMARC evaluation is incomplete. > > I don't think we need to tell people what to do with such messages. I > think > this is enough. > > Scott K > >

Re: [dmarc-ietf] General Purpose Domain

2024-03-18 Thread Todd Herr
ility Considerations) for further discussion of this topic." and be done with it. -- Todd Herr | Technical Director, Standards & Ecosystem Email: todd.h...@valimail.com Phone: 703-220-4153 This email and all data transmitted with it contains confidential and/or proprietary informat

Re: [dmarc-ietf] DMARC exceptions

2024-03-15 Thread Todd Herr
rstand how reliable the Domain Owner believes its authentication practices to be and, along with everything else the Mail Receiver knows about the sending domain, the source of the mail stream, etc., etc., how much weight can be assigned to a failed DMARC authentication result for that domain. --

Re: [dmarc-ietf] DMARCbis WGLC Issue 132 - 5.5.1 and 5.5.2 SHOULD vs MUST (was Another point for SPF advice)

2024-03-14 Thread Todd Herr
On Thu, Mar 14, 2024 at 4:52 PM Hector Santos wrote: > > On Mar 14, 2024, at 4:02 PM, Todd Herr 40valimail@dmarc.ietf.org> wrote: > > On Thu, Mar 14, 2024 at 3:25 PM Hector Santos 40isdg@dmarc.ietf.org> wrote: > >> On Mar 14, 2024, at 10:09 AM, Todd Herr >

Re: [dmarc-ietf] DMARCbis WGLC Issue 136 - DMARC Records Can Be CNAMEs

2024-03-14 Thread Todd Herr
On Thu, Mar 14, 2024 at 5:05 PM Mark Alley wrote: > On 3/14/2024 3:49 PM, Todd Herr wrote: > > On Thu, Mar 14, 2024 at 4:43 PM Mark Alley 40tekmarc@dmarc.ietf.org> wrote: > >> On 3/14/2024 3:38 PM, Todd Herr wrote: >> >> On Thu, Mar 14, 2024 at

Re: [dmarc-ietf] DMARCbis WGLC Issue 136 - DMARC Records Can Be CNAMEs

2024-03-14 Thread Todd Herr
On Thu, Mar 14, 2024 at 4:43 PM Mark Alley wrote: > On 3/14/2024 3:38 PM, Todd Herr wrote: > > On Thu, Mar 14, 2024 at 4:34 PM Scott Kitterman > wrote: > >> >> I think this is correct. I think it's obviously enough correct that I'm >> surprised anyone wa

Re: [dmarc-ietf] DMARCbis WGLC Issue 136 - DMARC Records Can Be CNAMEs

2024-03-14 Thread Todd Herr
... Granted, the first two citations are in regards to DKIM records, not DMARC records, but those were the reasons given. -- Todd Herr | Technical Director, Standards & Ecosystem Email: todd.h...@valimail.com Phone: 703-220-4153 This email and all data transmitted with it contains co

[dmarc-ietf] DMARCbis WGLC Issue 136 - DMARC Records Can Be CNAMEs

2024-03-14 Thread Todd Herr
n a DNS RR in the expected format. Issue 136 has been opened for this. -- Todd Herr | Technical Director, Standards & Ecosystem Email: todd.h...@valimail.com Phone: 703-220-4153 This email and all data transmitted with it contains confidential and/or proprietary information intended sole

Re: [dmarc-ietf] DMARCbis WGLC Issue 132 - 5.5.1 and 5.5.2 SHOULD vs MUST (was Another point for SPF advice)

2024-03-14 Thread Todd Herr
On Thu, Mar 14, 2024 at 3:25 PM Hector Santos wrote: > On Mar 14, 2024, at 10:09 AM, Todd Herr 40valimail@dmarc.ietf.org> wrote: > > To configure SPF for DMARC, the Domain Owner MUST choose a domain to use > as the RFC5321.MailFrom domain (i.e., the Return-Path domai

[dmarc-ietf] DMARCbis WGLC - Issue 135 - What To Say About Too-Permissive/Third-Party SPF and Where To Say It?

2024-03-14 Thread Todd Herr
Colleagues, Issue 135 is open for the subject topic. Please add your thoughts to this thread and/or to the issue in Github. Thank you. -- Todd Herr | Technical Director, Standards & Ecosystem Email: todd.h...@valimail.com Phone: 703-220-4153 This email and all data transmi

Re: [dmarc-ietf] picking nits with the ABNF

2024-03-14 Thread Todd Herr
On Thu, Mar 14, 2024 at 11:04 AM Alessandro Vesely wrote: > On Thu 14/Mar/2024 15:38:23 +0100 Todd Herr wrote: > > To summarize this thread, I see three nits, all of which have been added > to > > issue 133: > > > [snip] > > > > 3. Section 5.3., Genera

[dmarc-ietf] DMARCbis WGLC Issue 134 - What To Do With Appendix A.5?

2024-03-14 Thread Todd Herr
ject issue for this matter, and in that issue I floated the possibility of moving A.5 to section 7, Changes from RFC 7489, with some text along the lines of "we deleted the discussion of ADSP from this version, but it's preserved here for historical purposes" Discuss... -- Todd Herr

Re: [dmarc-ietf] A.5 Issues with ADSP in Operation

2024-03-14 Thread Todd Herr
ty to be true, Ale. DMARCbis, like RFC 7489 before it, contains this sentence in the description of DMARC records: Unknown tags MUST be ignored. Any site implementing the DMARCbis spec will see "pct" as an unknown and ignore it. -- Todd Herr | Technical Director, Standar

Re: [dmarc-ietf] DMARCbis WGLC Issue 132 - 5.5.1 and 5.5.2 SHOULD vs MUST (was Another point for SPF advice)

2024-03-14 Thread Todd Herr
and assuming I am > reading it correctly, I support the change. > That is the gist of the text I've proposed, yes. [rest snipped for further discussion when issue is opened and reported to list] -- Todd Herr | Technical Director, Standards & Ecosystem Email: todd.h...@vali

Re: [dmarc-ietf] picking nits with the ABNF

2024-03-14 Thread Todd Herr
ed from [RFC3986]; commas > ; (ASCII 0x2C) and exclamation points > ; (ASCII 0x21) MUST be encoded > > Could they be rewritten for readability > > ; "URI" is imported from [RFC3986]; > ; (ASCII 0x2C) commas and >

Re: [dmarc-ietf] Fwd: [Errata Held for Document Update] RFC7489 (7835)

2024-03-14 Thread Todd Herr
tion Date : March 2015 > Author(s) : M. Kucherawy, Ed., E. Zwicky, Ed. > Category : INFORMATIONAL > Source : INDEPENDENT > Area : N/A > Stream : INDEPENDENT > Verifying Party : ISE & Editorial Board > > ___ > dmarc mailin

Re: [dmarc-ietf] Appendix B.2.3. Per-Message Failure Reports Directed to Third Party

2024-03-14 Thread Todd Herr
umers for both aggregate and failure reports, though, so I submit that it is "real-life" to exemplify directing failure reports to third parties. -- Todd Herr | Technical Director, Standards & Ecosystem Email: todd.h...@valimail.com Phone: 703-220-4153 This email and all data transmitte

Re: [dmarc-ietf] Nit: Appendix B.1, examples parallelism and typo

2024-03-14 Thread Todd Herr
llelize the roles of > the identifiers. > > > Best > Ale > -- > > > > ___ > dmarc mailing list > dmarc@ietf.org > https://www.ietf.org/mailman/listinfo/dmarc > -- Todd Herr | Technical Director, Standards &

Re: [dmarc-ietf] Section 9.5 DMARC Report Format Registry

2024-03-14 Thread Todd Herr
gt;>> or (more likely) leave a tombstone page in its place. I'll ask. >>> >>> -MSK >>> ___ >>> dmarc mailing list >>> dmarc@ietf.org >>> https://www.ietf.org/mailman/listinfo/dmarc >>> >&g

Re: [dmarc-ietf] Nit: missing angle brackets

2024-03-14 Thread Todd Herr
> > > > > > > > ___ > dmarc mailing list > dmarc@ietf.org > https://www.ietf.org/mailman/listinfo/dmarc > -- Todd Herr | Technical Director, Standards & Ecosystem Email: todd.h...@valimail.com Phone: 703-22

[dmarc-ietf] DMARCbis WGLC Issue 132 - 5.5.1 and 5.5.2 SHOULD vs MUST (was Another point for SPF advice)

2024-03-14 Thread Todd Herr
rgery discussed in RFC 7208 Section 11.4, and I will open a separate issue for that to expand on section 8.1 -- Todd Herr | Technical Director, Standards & Ecosystem Email: todd.h...@valimail.com Phone: 703-220-4153 This email and all data transmitted with it contains confidential an

Re: [dmarc-ietf] Problem with multiple policies, different alignment

2024-03-13 Thread Todd Herr
have the same organizational domain as the From domain; it can be the organizational domain, as I mentioned above. Perhaps this could be written as "When a string comparison shows that the rightmost labels of the SPF/DKIM domain are not identical to the organizational domain, in which ca

Re: [dmarc-ietf] DMARCbis WGLC Significant(ish) Issue - Section 7.6

2024-03-08 Thread Todd Herr
On Fri, Mar 8, 2024 at 4:52 AM Alessandro Vesely wrote: > On 06/03/2024 15:42, Todd Herr wrote: > > On Tue, Mar 5, 2024 at 10:45 PM Barry Leiba > wrote: > > > >> SHOULD NOT was the consensus call, and the correction Todd > >> proposes is just making that sent

Re: [dmarc-ietf] Fwd: [Editorial Errata Reported] RFC7489 (7835)

2024-03-07 Thread Todd Herr
On Wed, Mar 6, 2024 at 7:02 PM Murray S. Kucherawy wrote: > On Wed, Mar 6, 2024 at 11:42 AM Todd Herr 40valimail@dmarc.ietf.org> wrote: > >> The text reported in the erratum doesn't really exist in DMARCbis; it's >> been replaced by the DNS Tree Walk ( >> http

Re: [dmarc-ietf] DMARCbis WGLC Issue - Clarify When Tree Walk Starts?

2024-03-07 Thread Todd Herr
On Thu, Mar 7, 2024 at 5:08 AM Alessandro Vesely wrote: > On 06/03/2024 21:00, Todd Herr wrote: > > > > Section 4.7, DMARC Policy Discovery, starts with the following sentence: > > > > For policy discovery, a DNS Tree Walk starts at the domain found in >

[dmarc-ietf] DMARCbis WGLC Issue - Clarify When Tree Walk Starts?

2024-03-06 Thread Todd Herr
scovery, the Tree Walk is only necessary if there's no policy published specifically for the RFC5322.From domain. I've created Issue #128 for this. -- *Todd Herr * | Technical Director, Standards & Ecosystem *e:* todd.h...@valimail.com *p:* 703-220-4153 *m:* 703.220.4153 This email and all

Re: [dmarc-ietf] Fwd: [Editorial Errata Reported] RFC7489 (7835)

2024-03-06 Thread Todd Herr
e more explicit about what's going on here. > The text reported in the erratum doesn't really exist in DMARCbis; it's been replaced by the DNS Tree Walk ( https://www.ietf.org/archive/id/draft-ietf-dmarc-dmarcbis-30.html#name-dns-tree-walk ) Are we to issue an actual update to RFC 7489 here as we

Re: [dmarc-ietf] DMARCbis WGLC Issue - Section 11.3

2024-03-06 Thread Todd Herr
absence of > DMARC and will not be able to take the senders' policies into account. > END > > (Or just skip the second sentence and do it as you suggest) > > Barry > > On Thu, Feb 29, 2024 at 4:44 PM Todd Herr > wrote: > > > > Colleagues, > > > > T

Re: [dmarc-ietf] DMARCbis WGLC Significant(ish) Issue - Section 7.6

2024-03-06 Thread Todd Herr
s; Todd, please just add this change to your other > editorial changes. > > Done and recorded in closed issue #122. -- *Todd Herr * | Technical Director, Standards & Ecosystem *e:* todd.h...@valimail.com *p:* 703-220-4153 *m:* 703.220.4153 This email and all data transmitted w

Re: [dmarc-ietf] The description of psd=n

2024-03-05 Thread Todd Herr
On Tue, Mar 5, 2024 at 1:30 PM Scott Kitterman wrote: > > > On March 5, 2024 2:47:47 PM UTC, Todd Herr 40valimail@dmarc.ietf.org> wrote: > >On Tue, Mar 5, 2024 at 6:12 AM Alessandro Vesely wrote: > > > >> Hi, > >> > >> Section 5.3, i

Re: [dmarc-ietf] 5.5. Domain Owner Actions

2024-03-05 Thread Todd Herr
Mail Receivers who send reports. Can you please describe the reports you'd expect Domain Owners to create? -- *Todd Herr * | Technical Director, Standards & Ecosystem *e:* todd.h...@valimail.com *p:* 703-220-4153 *m:* 703.220.4153 This email and all data transmitted with it contains confident

Re: [dmarc-ietf] 4.1 DMARC Basics

2024-03-05 Thread Todd Herr
y for such services is enabled by > DMARC but defined in other referenced material such as [RFC6591] and > [I-D.ietf-dmarc-failure-reporting] > > Issue 127 open to track this. I think there's something here to work with. -- *Todd Herr * | Technical Director, Standards

Re: [dmarc-ietf] A possible point for SPF advice

2024-03-05 Thread Todd Herr
world in which two of the largest mailbox providers (Google and Yahoo) are requiring SPF authentication, DKIM authentication, and DMARC pass for certain classes of mailers to get their mail accepted, I'm not sure that offering advice that will ensure the lack of an SPF pass (and therefore a lack of SPF

Re: [dmarc-ietf] The description of psd=n

2024-03-05 Thread Todd Herr
t; the > domain is not a PSD /and/ it is the Organizational Domain for itself and > its subdomain. > > You may be correct in your assertion here; I'll wait for others to weigh in. In the meantime, Issue 126 has been opened to track this. -- *Todd Herr * | Technical Director, Standar

Re: [dmarc-ietf] Another point for SPF advice

2024-03-05 Thread Todd Herr
t; To further this discussion, please define "public sources", compare and contrast that definition to the definition of "private sources", and then describe which sources are "trusted" and by whom. -- *Todd Herr * | Technical Director, Standards & Ecosystem *e

[dmarc-ietf] DMARCbis WGLC Issue - Description of rua and ruf Tags

2024-03-01 Thread Todd Herr
domain. URIs not supported by Mail Receivers MUST be ignored. The format for message-specific failure reporting is described in [ I-D.ietf-dmarc-failure-reporting <#I-D.ietf-dmarc-failure-reporting>]. = cut here == Discuss at your convenience,

Re: [dmarc-ietf] DMARCbis WGLC Issue - Section 11.3

2024-03-01 Thread Todd Herr
On Thu, Feb 29, 2024 at 10:12 PM John Levine wrote: > It appears that Todd Herr said: > >p=none by default." This seems inconsistent with the text in 5.7.2 > >("Continue if one is found, or terminate DMARC evaluation otherwise") and > >4.7 ("Handling

Re: [dmarc-ietf] Working Group Last Call on draft-ietf-dmarc-dmarcbis-30

2024-02-29 Thread Todd Herr
On Thu, Feb 29, 2024 at 10:10 AM Todd Herr wrote: > On Thu, Feb 29, 2024 at 9:58 AM OLIVIER HUREAU < > olivier.hur...@univ-grenoble-alpes.fr> wrote: > >> Would you prefer one comment/issue or in batch? >> > > I would prefer that Barry's request be honored from h

[dmarc-ietf] DMARCbis WGLC Issue - Section 11.3

2024-02-29 Thread Todd Herr
d exists with a policy of p=none" I believe the phrase "causing recipients to assume p=none by default" should be stricken from the bullet in 11.3. Please discuss. -- *Todd Herr * | Technical Director, Standards & Ecosystem *e:* todd.h...@valimail.com *p:* 703-220-4153

Re: [dmarc-ietf] DMARCbis WGLC Significant(ish) Issue - Section 7.6

2024-02-29 Thread Todd Herr
ULD NOT, there was strong resistance to MUST NOT > > On Thu, Feb 29, 2024 at 2:48 PM Scott Kitterman > wrote: > >> Okay. I think 8.6 is the one in error. You see how this is going to go, >> right? >> >> Scott K >> >> On February 29, 2024 7:45:15 PM UT

Re: [dmarc-ietf] DMARCbis WGLC Significant(ish) Issue - Section 7.6

2024-02-29 Thread Todd Herr
t; issues we've been counseled to avoid. > > Scott K > > On February 29, 2024 6:54:57 PM UTC, Todd Herr 40valimail@dmarc.ietf.org> wrote: > >Colleagues, > > > >I've been reading DMARCbic rev -30 today with a plan to collect the first > >set of minor

[dmarc-ietf] DMARCbis WGLC Significant(ish) Issue - Section 7.6

2024-02-29 Thread Todd Herr
might post messages to mailing lists SHOULD NOT publish p=reject") Section 7.6 therefore should be updated to read "domains for general-purpose email SHOULD NOT deploy a DMARC policy of p=reject", yes? -- *Todd Herr * | Technical Director, Standards & Ecosystem *e:* todd.h.

Re: [dmarc-ietf] Working Group Last Call on draft-ietf-dmarc-dmarcbis-30

2024-02-29 Thread Todd Herr
121, > which I've cleverly titled "WGLC Minor Issues and Editorial Comments". > so I can pull the minor issues and comments from this thread into that Github Issue. -- *Todd Herr * | Technical Director, Standards & Ecosystem *e:* todd.h...@valimail.com *p:* 703-220-4153 *m:*

Re: [dmarc-ietf] Working Group Last Call on draft-ietf-dmarc-dmarcbis-30

2024-02-29 Thread Todd Herr
es and editorial comments in Github Issue 121, which I've cleverly titled "WGLC Minor Issues and Editorial Comments". I've already found one: Kurt Andersen's last name is misspelled in "Acknowledgements - RFC 7489". https://github.com/ietf-wg-dmarc/draft-ietf-dmarc-dmarcbis

Re: [dmarc-ietf] Inconsistencies in DMARC Aggregate Report XML Schema

2024-02-29 Thread Todd Herr
igate against risk of these sorts of attacks, and DMARC aggregate reports are a tool that can be used to do so. -- *Todd Herr * | Technical Director, Standards & Ecosystem *e:* todd.h...@valimail.com *p:* 703-220-4153 *m:* 703.220.4153 This email and all data transmitted with it contains confid

Re: [dmarc-ietf] I-D Action: draft-ietf-dmarc-dmarcbis-30.txt

2024-02-28 Thread Todd Herr
; > _______ > I-D-Announce mailing list > i-d-annou...@ietf.org > https://www.ietf.org/mailman/listinfo/i-d-announce > > -- *Todd Herr * | Technical Director, Standards & Ecosystem *e:* todd.h...@valimail.com *p:* 703-220-4153 *m:

Re: [dmarc-ietf] Inconsistencies in DMARC Aggregate Report XML Schema

2024-02-28 Thread Todd Herr
; > Agreed on 5.5.3. > I also agree on 5.5.3, and DMARCbis rev-30 will contain no occurrences of the three letter sequence "XML". -- *Todd Herr * | Technical Director, Standards & Ecosystem *e:* todd.h...@valimail.com *p:* 703-220-4153 *m:* 703.220.4153 This email and

Re: [dmarc-ietf] dmarc-dmarcbis: add "req=dkim"

2024-02-08 Thread Todd Herr
MARC does not change that, regardless of the policy setting for the claimed sending domain or the DMARC validation results. Sites participating in DMARC are not required to honor the policy statement published by the domain owner. -- *Todd Herr * | Technical Director, Standards & Ecosystem *e:*

Re: [dmarc-ietf] dmarc-dmarcbis: add "req=dkim"

2024-02-06 Thread Todd Herr
ng the tag after all - https://mailarchive.ietf.org/arch/msg/dmarc/lplcAiYMqCh_Grp7lwfbDqlVicA/ > > As at the moment, as per the example I gave in the email, DKIM is futile > to have if SPF passes. > Your example shows an SPF result of "softfail", which I do not understand

Re: [dmarc-ietf] DMARC with multi-valued RFC5322.From

2024-01-19 Thread Todd Herr
ect. > Perhaps the way forward for DMARC is to look for a Sender header when there is more than one RFC5322.From domain and use that for DMARC processing, with the stipulation that messages that don't contain such a Sender header are invalid and should be rejected? -- *Todd Herr * | Technical

Re: [dmarc-ietf] DMARC with multi-valued RFC5322.From

2024-01-11 Thread Todd Herr
iving MTA to recognize such messages as the threats they might be and handle them appropriately. <https://www.ietf.org/archive/id/draft-ietf-dmarc-dmarcbis-29.html#section-11.5-1> -- *Todd Herr * | Technical Director, Standards & Ecosystem *e:* todd.h...@valimail.com *p:* 703-220-41

Re: [dmarc-ietf] I-D Action: draft-ietf-dmarc-dmarcbis-29.txt

2024-01-02 Thread Todd Herr
-ietf-dmarc-dmarcbis-29 > > Internet-Drafts are also available by rsync at: > rsync.ietf.org::internet-drafts > > > _______ > dmarc mailing list > dmarc@ietf.org > https://www.ietf.org/mailman/listinfo/dmarc > -- *Todd Herr * | Technical Director,

[dmarc-ietf] Codifying "Apex Domain"?

2023-11-09 Thread Todd Herr
//www.ietf.org/archive/id/draft-ietf-dmarc-dmarcbis-28.html#organizational-domain-discovery>. The Organizational Domain is also sometimes referred to as the Apex Domain. Discuss... -- *Todd Herr * | Technical Director, Standards & Ecosystem *e:* todd.h...@valimail.com *p:* 7

[dmarc-ietf] Jumping the Gun

2023-10-25 Thread Todd Herr
r "content". -- *Todd Herr * | Technical Director, Standards & Ecosystem *e:* todd.h...@valimail.com *p:* 703-220-4153 *m:* 703.220.4153 This email and all data transmitted with it contains confidential and/or proprietary information intended solely for the use of individual(s) authoriz

[dmarc-ietf] DMARCbis rev 29 (was: Re: DMARCbis way forward: Do we need our session at IETF 118)

2023-10-25 Thread Todd Herr
text from $MAILING_LIST_THREAD Todd, as editor whose mail client isn't one that lends itself well to piecing together multiple threads into a coherent list... -- *Todd Herr * | Technical Director, Standards & Ecosystem *e:* todd.h...@valimail.com *p:* 703-220-4153 *m:* 703.220.4153 This

Re: [dmarc-ietf] Why Relaxed Alignment?

2023-10-18 Thread Todd Herr
to WeSendEmail. -- *Todd Herr * | Technical Director, Standards & Ecosystem *e:* todd.h...@valimail.com *p:* 703-220-4153 *m:* 703.220.4153 This email and all data transmitted with it contains confidential and/or proprietary information intended solely for the use of individual(s) authorized to

Re: [dmarc-ietf] Tree Walk impact

2023-10-10 Thread Todd Herr
ing... The illustrative example cited is intended to illustrate a full tree walk that follows the steps for a full tree walk that are spelled out in the numbered list just prior to the illustrative example. That numbered list includes conditional stops (i.e., if one record is found with the specified cond

Re: [dmarc-ietf] Aggregate Report Draft

2023-09-27 Thread Todd Herr
stop. Might make sense to only address the topic in one section, rather than two. Section 6.4, Feedback Leakage. The paragraph on Multi-organizational PSDs that require DMARC starts with the word "Reports" stretched over two lines, but not hyphenated. Section 10, Normative References, contain

Re: [dmarc-ietf] SMTP Result Codes was -Re: Another p=reject text proposal

2023-07-12 Thread Todd Herr
9258-NA Their use of 5.7.26 seems in keeping with IANA - Multiple authentication checks failed - since in order to fail DMARC, both SPF and DKIM must fail. https://www.iana.org/assignments/smtp-enhanced-status-codes/smtp-enhanced-status-codes.xhtml -- *Todd Herr * | Technical Director, Standards

Re: [dmarc-ietf] Another p=reject text proposal

2023-07-06 Thread Todd Herr
and today was as good a time for that as any. -- *Todd Herr * | Technical Director, Standards & Ecosystem *e:* todd.h...@valimail.com *p:* 703-220-4153 *m:* 703.220.4153 This email and all data transmitted with it contains confidential and/or proprietary information intended solely for the use

Re: [dmarc-ietf] Another p=reject text proposal

2023-07-06 Thread Todd Herr
t; > ___ > dmarc mailing list > dmarc@ietf.org > https://www.ietf.org/mailman/listinfo/dmarc > -- *Todd Herr * | Technical Director, Standards & Ecosystem *e:* todd.h...@valimail.com *p:* 703-220-4153 *m:* 703.220.4153 This

[dmarc-ietf] Idle Musings - Why Is It DMARC and not DMARD?

2023-06-30 Thread Todd Herr
of spelling out the full name of the mechanism. I am not looking to change the name of the mechanism; I'm just genuinely curious how the name was arrived at. -- *Todd Herr * | Technical Director, Standards & Ecosystem *e:* todd.h...@valimail.com *p:* 703-220-4153 *m:* 703.220.4153 T

[dmarc-ietf] SPF/DKIM/DMARC statistics from Valimail

2023-06-22 Thread Todd Herr
right way to go here. -- *Todd Herr * | Technical Director, Standards & Ecosystem *e:* todd.h...@valimail.com *p:* 703-220-4153 *m:* 703.220.4153 This email and all data transmitted with it contains confidential and/or proprietary information intended solely for the use of individual(s) authoriz

Re: [dmarc-ietf] easier DKIM, DMARC2 & SPF Dependency Removal

2023-06-22 Thread Todd Herr
ee a perhaps higher than expected percentage of DMARC passes that relied on SPF only (or at least a higher than expected rate of DKIM failures) I'd posit that many of those DKIM failures are due to the challenges that Marty and people like them face with getting the key published. -- *Todd Herr *

Re: [dmarc-ietf] easier DKIM, DMARC2 & SPF Dependency Removal

2023-06-21 Thread Todd Herr
On Wed, Jun 21, 2023 at 4:22 AM Alessandro Vesely wrote: > On Tue 20/Jun/2023 15:40:11 +0200 Todd Herr wrote: > > > > I can't speak for Patrick, but I don't think he's necessarily thinking > of > > different encryption algorithms here. > > > > Not all who

Re: [dmarc-ietf] easier DKIM, DMARC2 & SPF Dependency Removal

2023-06-20 Thread Todd Herr
evices to engage third party senders, and that should solely be the province of the IT staff that manages DNS, but I fear that the energy required to type and distribute such words would be wasted. -- *Todd Herr * | Technical Director, Standards & Ecosystem *e:* todd.h...@valimail.com *p:* 703

Re: [dmarc-ietf] Tree Walk Damage

2023-05-03 Thread Todd Herr
ith no document > change needed. > Done. -- *Todd Herr * | Technical Director, Standards and Ecosystem *e:* todd.h...@valimail.com *m:* 703.220.4153 This email and all data transmitted with it contains confidential and/or proprietary information intended solely for the use of ind

Re: [dmarc-ietf] Signaling forwarders, not just MLMs

2023-04-13 Thread Todd Herr
r SHOULD choose a DKIM-Signing domain (i.e., the d= domain in the DKIM-Signature header) that aligns with the Author Domain. -- *Todd Herr * | Technical Director, Standards and Ecosystem *e:* todd.h...@valimail.com *m:* 703.220.4153 This email and all data transmitted with it contains confidential

Re: [dmarc-ietf] Signaling MLMs

2023-04-13 Thread Todd Herr
On Wed, Apr 12, 2023 at 11:35 PM Murray S. Kucherawy wrote: > On Wed, Apr 12, 2023 at 11:41 AM Todd Herr 40valimail@dmarc.ietf.org> wrote: > >> On Wed, Apr 12, 2023 at 2:16 PM Murray S. Kucherawy >> wrote: >> >>> I've been thinking about the point a

Re: [dmarc-ietf] Signaling MLMs

2023-04-12 Thread Todd Herr
hey may not want). > My preference here would be to add text for Domain Owners to make them understand the ways that p=reject might cause some mail using their domain to not make it to its destination, with "mailing lists might reject your mail" being one such example. -- *Todd Herr * | T

Re: [dmarc-ietf] 5322.From Header Rewrite specification

2023-03-31 Thread Todd Herr
ing seems to be from the same neighborhood as the Sender Rewriting Scheme used sometimes for 5321.From rewriting to mitigate SPF failures - https://www.libsrs2.org/srs/srs.pdf -- *Todd Herr * | Technical Director, Standards and Ecosystem *e:* todd.h...@valimail.com *m:* 703.220.4153 This email and all data

Re: [dmarc-ietf] Example of Indirect Mail Flow Breakage with p=reject?

2023-03-30 Thread Todd Herr
whose aren't Anyway, this is why I continue to support the idea of describing the interoperability issues, but opposed to the idea of telling domain owners not to use p=reject. -- *Todd Herr * | Technical Director, Standards and Ecosystem *e:* todd.h...@valimail.com *m:* 703.220.415

[dmarc-ietf] Example of Indirect Mail Flow Breakage with p=reject?

2023-03-29 Thread Todd Herr
previous employer deployed p=reject) and so I want to be able to send a message that would result in such a bounce. Can anyone help me? Thanks. -- *Todd Herr * | Technical Director, Standards and Ecosystem *e:* todd.h...@valimail.com *m:* 703.220.4153 This email and all data transmitted

Re: [dmarc-ietf] Proposed text for p=reject and indirect mail flows

2023-03-29 Thread Todd Herr
o their mail that might be considered somewhat higher than "low" in the eyes of some beholders. -- *Todd Herr * | Technical Director, Standards and Ecosystem *e:* todd.h...@valimail.com *m:* 703.220.4153 This email and all data transmitted with it contains confidential and/or proprietary infor

Re: [dmarc-ietf] Proposed text for p=reject and indirect mail flows

2023-03-29 Thread Todd Herr
with its recipients, then it is **RECOMMENDED** that the Domain Owner make use of the p and/or sp tags to set policy to 'quarantine' or 'reject' for those streams most at risk of loss of trust. If going that route, probably want to consider expanding on 5.5.5, too; I need to think about it some more. --

Re: [dmarc-ietf] Proposed text for p=reject and indirect mail flows

2023-03-28 Thread Todd Herr
domain owner. My preference is for language that acknowledges the primacy of the domain owner over interoperability. I don't have time tonight to propose alternative text, but I wanted to acknowledge that I've read your message and make a promise to propose alternative text tomorrow. -- *

Re: [dmarc-ietf] Proposed text for p=reject and indirect mail flows

2023-03-28 Thread Todd Herr
d fully documented (to include references to mitigation strategies) then a domain owner will have all the information they need to make their choice as to what policy to deploy. To mandate that certain classes of domains not do something (and just how do we define "general-purpose" ema

Re: [dmarc-ietf] Proposed text for p=reject and indirect mail flows

2023-03-28 Thread Todd Herr
Upon further reflection, I find myself liking Barry's proposed text less, and instead propose the following: On Tue, Mar 28, 2023 at 9:42 AM Todd Herr wrote: > On 28 Mar 2023, at 17:15, Barry Leiba wrote: >> >> > NEW >> > >> >5.5.6. Decid

[dmarc-ietf] DMARCbis and M3AAWG Email Auth BCP (was re: Proposed text for p=reject and indirect mail flows)

2023-03-28 Thread Todd Herr
be ... where possible", but you're right that this question is probably off-topic for this working group. -- *Todd Herr * | Technical Director, Standards and Ecosystem *e:* todd.h...@valimail.com *m:* 703.220.4153 This email and all data transmitted with it contains confidential and/or proprietary inf

Re: [dmarc-ietf] Proposed text for p=reject and indirect mail flows

2023-03-28 Thread Todd Herr
epercussions of each decision. In particular, this document makes explicit that domains for general-purpose email **MUST NOT** deploy a DMARC policy of p=reject. END Obviously, the last paragraph of section 7.6 will reflect the consensus of whatever 5.5.6 ends up being. -- *Todd Her

Re: [dmarc-ietf] DMARC agenda for IETF 116 -- and do we need one?

2023-03-10 Thread Todd Herr
of any issues with dmarcbis that would be worth a > meeting. I think it's ready for last call and we certainly don't need > a meeting for that. > > As much as I relish the idea of a call at 2:30AM EDT, I must concur here. -- *Todd Herr * | Technical Director, Standards and Ecosystem *e:* t

Re: [dmarc-ietf] I-D Action: draft-ietf-dmarc-dmarcbis-27.txt

2023-02-28 Thread Todd Herr
s available at: > https://author-tools.ietf.org/iddiff?url2=draft-ietf-dmarc-dmarcbis-27 > > > Internet-Drafts are also available by rsync at rsync.ietf.org: > :internet-drafts > > > _______ > dmarc mailing list > dmarc@ietf

  1   2   3   4   >