On 5 Nov 2020, at 9:45, Seth Blank wrote:

On Thu, Nov 5, 2020 at 9:31 AM Alessandro Vesely <ves...@tana.it> wrote:

That's the old spec. The consensus of the working group is to remove the normative constraint about p= (ticket #49). So now only v= is required.


As Chair, this is not the consensus of the group, nor what ticket #49 ( https://trac.ietf.org/trac/dmarc/ticket/49) says. What we removed was the normative requirement that p= MUST be the second tag in the record. p= is
still REQUIRED.

To Todd's point, DMARC is a means of communicating policy between domain owner and mail receiver regarding how to handle unauthenticated mail. DMARC
does not function without policy.

If that last sentence is the consensus of the working group (and I see that the charter could be interpreted that policy is required), then fine. But I consider the reporting aspect to be useful even in the absence of policy assertion or enforcement, allow a domain owner to obtain information about recipients’ receipt of unauthenticated email from that domain. I realize that RFC 7489 treats policy as the primary function and reporting as secondary, but this WG is about improving that specification, and I consider this to be an improvement.

If someone believes policy can be spun out into a separate draft, please
upload your suggestion as an I-D and we will discuss it.

That’s quite a bit of work for something that might very well be dead on arrival. I have outlined the portions of the specification that would go in the base specification and the portions that go into the policy document, and that should be sufficient to make this decision.

To Todd’s earlier comment, the base specification would be much more than a “table of contents” because that is where the format of DMARC records, the discovery mechanisms, and the like would be specified. However, the base specification would not stand alone; it would require the policy specification or one or both of the reporting specifications to do anything useful.

-Jim

_______________________________________________
dmarc mailing list
dmarc@ietf.org
https://www.ietf.org/mailman/listinfo/dmarc

Reply via email to