On 5/4/15 4:20 PM, Franck Martin wrote: > ----- Original Message ----- >> From: "Stephen J. Turnbull" <step...@xemacs.org> >> To: "Kurt Andersen" <ku...@drkurt.com> >> Cc: dmarc@ietf.org, "Murray S. Kucherawy" <superu...@gmail.com>, "Franck >> Martin" <fra...@peachymango.org> >> Sent: Saturday, May 2, 2015 9:56:44 AM >> Subject: Re: [dmarc-ietf] OpenDKIM ADSP, DMARC and ATPS support >> >> Kurt Andersen writes: >> >> > On Thu, Apr 30, 2015 at 9:27 AM, Franck Martin <fra...@peachymango.org> >> > wrote: >> >> > > my corporate email address, but I wanted to mention the presence of such >> > > headers is not foolproof. >> >> > With List-Id becoming a more generic feedback channel, I suspect >> > that its value for indicating the participation of a MLM will >> > further degrade. >> >> Guys, if you want to attack a proposal, please make one first. I did >> not propose this. My whole point was that it's easy to imagine ways >> that the registration problem could be handled by "p=reject" domains >> *if* they want to handle it, and therefore we *don't* need to make any >> such proposal ourselves. No more, and no less -- I wouldn't waste the >> list's time on such a proposal if I were you. But YMMV, be my guest. > I did not want to burn your proposal, sorry if it passed like this. I just > wanted to make a comment, from personal observations, that non-mailing list > related emails have list-id too. Dear Kurt and Franck,
List-ids on their own offer little value. Accommodations for MLMs can leverage list-ids to confirm a subscription which can be sorted accordingly. Unlike transactional messaging that often does not involve non-vetted messages, public interaction often makes use of friendly displays and simple sorting methodology. It is doubtful there is a safe and responsive method to delegate signing on a public message by public message basis without causing uncontrollable risk. No authentication method prevents abuse, but signature delegation introduces a greater range of deceptions. An ability to require specific list-ids/domain offers a few advantages- 1) origination out of a subscribed and authorized source 2) exceptions that permit invalid author domain signatures but require an ability to be sorted accordingly 3) allows disabling specific problematic lists without impacting others Regards, Douglas Otis _______________________________________________ dmarc mailing list dmarc@ietf.org https://www.ietf.org/mailman/listinfo/dmarc
