But I am a commercial MLS producer and there are some considerations when you integrate it into the mail system. I think we covered most of the concepts over the years. But it is just lost in tons of verbiage and repeating it is just going to be as confusing.

I suggest to summarize it in a technical summary and can get begin with a basic idea:

    MLS/MLM (entry points) SHOULD honor DMARC policies by controlling
    the subscription and submission process of restrictive domains.

This is how we begin to minimize the impact. I think it will be a mistake to assume domains who will invest into DMARC will accept the idea of "Security Holes" existing at certain MLM setups. What I won't do is add the built-in out of the box MLS capability to satisfy this limited MLM and short term desire of rewriting 5322.From lines. It will have to be totally binding with original domain permission to do so that all downlinks can verify. But then we will have a backward compatibility loophole.

Thanks Murray. Have a good day.

--
Hector Santos
http://www.santronics.com


On 10/6/2014 8:03 PM, Murray S. Kucherawy wrote:
On Mon, Oct 6, 2014 at 4:15 PM, Hector Santos <hsan...@isdg.net> wrote:

Murray, I think we need to make the distinction of two different concepts
and acronyms; MLM "Mailing List Manager" and MLS "Mail List Servers" that
serve the MLM market.  There are some basic integration guidelines for both
the MLS and MLM.  I understand we don't want to make any changes, but the
front-end, receivers, websites, i.e.  Potential Entry Points, do need
implementation change considerations.
[...]


I think this is unrelated to my point.

It's my understanding that the idea of altering DMARC to better work with
mailing lists is on the table, though later in our list of milestones.  The
idea of specifying how MLMs (or MLSes, or whatever) should operate in a
DMARC world, however, is not.

I just don't want any of us operating under the illusion that we can
prescribe how extant MLMs need to change now that DMARC is in use if in
fact we can't.  There's obviously a lot of energy to be wasted in that
direction.

-MSK


_______________________________________________
dmarc mailing list
dmarc@ietf.org
https://www.ietf.org/mailman/listinfo/dmarc

Reply via email to