Re: [dmarc-ietf] DMARC's purpose

2014-04-12 Thread Vlatko Salaj
On Sunday, April 13, 2014 1:31 AM, Franck Martin wrote: >> my email actually fails 98%. but who cares about me, i'm no facebook sending >> to yahoo, right? or yahoo sending to google... or some other big sending to >> some other big... or whatever. > Don't publish a DMARC policy which is detrimen

Re: [dmarc-ietf] DMARC's purpose

2014-04-12 Thread Scott Kitterman
On April 12, 2014 7:31:53 PM EDT, Franck Martin wrote: > >- Original Message - >> From: "Vlatko Salaj" >> To: dmarc@ietf.org >> Sent: Saturday, April 12, 2014 2:54:17 PM >> Subject: Re: [dmarc-ietf] DMARC's purpose >> >> On Saturday, April 12, 2014 11:19 PM, Scott Kitterman wrote: >> >>

Re: [dmarc-ietf] Fwd: DMARC's purpose

2014-04-12 Thread Miles Fidelman
Franck Martin wrote: - Original Message - From: "Scott Kitterman" To: dmarc@ietf.org Sent: Saturday, April 12, 2014 2:18:33 PM Subject: Re: [dmarc-ietf] Fwd: DMARC's purpose On Saturday, April 12, 2014 15:24:48 Franck Martin wrote: Printed on recycled paper! On Apr 12, 2014, at 12:

Re: [dmarc-ietf] DMARC's purpose

2014-04-12 Thread Franck Martin
- Original Message - > From: "Vlatko Salaj" > To: dmarc@ietf.org > Sent: Saturday, April 12, 2014 2:54:17 PM > Subject: Re: [dmarc-ietf] DMARC's purpose > > On Saturday, April 12, 2014 11:19 PM, Scott Kitterman wrote: > > > When I look at the feedback I get on my DMARC reports about 90%

Re: [dmarc-ietf] Fwd: DMARC's purpose

2014-04-12 Thread Franck Martin
- Original Message - > From: "Scott Kitterman" > To: dmarc@ietf.org > Sent: Saturday, April 12, 2014 2:18:33 PM > Subject: Re: [dmarc-ietf] Fwd: DMARC's purpose > > On Saturday, April 12, 2014 15:24:48 Franck Martin wrote: > > Printed on recycled paper! > > > > > On Apr 12, 2014, at 12

Re: [dmarc-ietf] DMARC's purpose

2014-04-12 Thread Vlatko Salaj
On Saturday, April 12, 2014 11:19 PM, Scott Kitterman wrote: > When I look at the feedback I get on my DMARC reports about 90% of the mail > I send fails DMARC despite good SPF and DKIM deployments due to mailing lists, > bug trackers, web site sharing, etc. For me and many others this is not abou

Re: [dmarc-ietf] Fwd: DMARC's purpose

2014-04-12 Thread Scott Kitterman
On Saturday, April 12, 2014 23:25:15 Kurt Roeckx wrote: > On Sat, Apr 12, 2014 at 05:18:33PM -0400, Scott Kitterman wrote: > > When I look at the feedback I get on my DMARC reports about 90% of the > > mail I send fails DMARC despite good SPF and DKIM deployments due to > > mailing lists, bug track

Re: [dmarc-ietf] Fwd: DMARC's purpose

2014-04-12 Thread Kurt Roeckx
On Sat, Apr 12, 2014 at 05:18:33PM -0400, Scott Kitterman wrote: > > When I look at the feedback I get on my DMARC reports about 90% of the mail I > send fails DMARC despite good SPF and DKIM deployments due to mailing lists, > bug trackers, web site sharing, etc. For me and many others this is

Re: [dmarc-ietf] Fwd: DMARC's purpose

2014-04-12 Thread Scott Kitterman
On Saturday, April 12, 2014 15:24:48 Franck Martin wrote: > Printed on recycled paper! > > > On Apr 12, 2014, at 12:25, "Scott Kitterman" wrote: > >> On Saturday, April 12, 2014 18:30:39 Franck Martin wrote: > >> Printed on recycled paper! > >> > >>> On Apr 12, 2014, at 3:59, "SM" wrote: > >>>

Re: [dmarc-ietf] Fwd: DMARC's purpose

2014-04-12 Thread Kurt Roeckx
On Sat, Apr 12, 2014 at 03:24:48PM -0500, Franck Martin wrote: > Feel free to propose a better solution.. Quickly.. It's actually not that hard. The technology already exists for over 20 years and is widely deployed already. Kurt ___ dmarc mailing l

Re: [dmarc-ietf] Fwd: DMARC's purpose

2014-04-12 Thread Miles Fidelman
Kurt Roeckx wrote: On Sat, Apr 12, 2014 at 03:57:51PM -0400, Miles Fidelman wrote: SM wrote: Hi Franck, At 11:30 12-04-2014, Franck Martin wrote: http://www.trendmicro.com/cloud-content/us/pdfs/security-intelligence/white-papers/wp-spear-phishing-email-most-favored-apt-attack-bait.pdf The ab

Re: [dmarc-ietf] Fwd: DMARC's purpose

2014-04-12 Thread Franck Martin
Printed on recycled paper! > On Apr 12, 2014, at 12:25, "Scott Kitterman" wrote: > >> On Saturday, April 12, 2014 18:30:39 Franck Martin wrote: >> Printed on recycled paper! >> >>> On Apr 12, 2014, at 3:59, "SM" wrote: >>> >>> Hi Franck, >>> >>> At 13:35 10-04-2014, Franck Martin wrote: >>

Re: [dmarc-ietf] Fwd: DMARC's purpose

2014-04-12 Thread Kurt Roeckx
On Sat, Apr 12, 2014 at 03:57:51PM -0400, Miles Fidelman wrote: > SM wrote: > >Hi Franck, > >At 11:30 12-04-2014, Franck Martin wrote: > >>http://www.trendmicro.com/cloud-content/us/pdfs/security-intelligence/white-papers/wp-spear-phishing-email-most-favored-apt-attack-bait.pdf > >> > > > >The abov

Re: [dmarc-ietf] Fwd: DMARC's purpose

2014-04-12 Thread Miles Fidelman
SM wrote: Hi Franck, At 11:30 12-04-2014, Franck Martin wrote: http://www.trendmicro.com/cloud-content/us/pdfs/security-intelligence/white-papers/wp-spear-phishing-email-most-favored-apt-attack-bait.pdf The above points me to an article from trendmicro.com. I was interested in reading your

Re: [dmarc-ietf] Fwd: DMARC's purpose

2014-04-12 Thread Scott Kitterman
On Saturday, April 12, 2014 18:30:39 Franck Martin wrote: > Printed on recycled paper! > > > On Apr 12, 2014, at 3:59, "SM" wrote: > > > > Hi Franck, > > > > At 13:35 10-04-2014, Franck Martin wrote: > >> Some random thoughts > > > > [snip] > > > >> -IETF recent focus is on pervasive moni

Re: [dmarc-ietf] Fwd: DMARC's purpose

2014-04-12 Thread SM
Hi Franck, At 11:30 12-04-2014, Franck Martin wrote: http://www.trendmicro.com/cloud-content/us/pdfs/security-intelligence/white-papers/wp-spear-phishing-email-most-favored-apt-attack-bait.pdf The above points me to an article from trendmicro.com. I was interested in reading your opinion.

Re: [dmarc-ietf] DMARC's purpose

2014-04-12 Thread SM
Hi Miles, At 09:23 12-04-2014, Miles Fidelman wrote: Well, let's see: - DMARC is an ad-hoc group that assembled with a "common goal was to develop an operational specification to be introduced to the IETF for standardization" (http://dmarc.org/about.html) - DMARC.org defines the "DMARC Base Sp

Re: [dmarc-ietf] DMARC's purpose

2014-04-12 Thread Miles Fidelman
Dave Crocker wrote: On 4/12/2014 9:26 AM, Miles Fidelman wrote: All I can speak for is observing some rather load and vociferous commentary, and agitation, from my BBN colleagues, many of whom were active in IETF, during the period where GSA and DoD were trying to foist OSI down everyone's thro

Re: [dmarc-ietf] DMARC's purpose

2014-04-12 Thread Dave Crocker
On 4/12/2014 9:26 AM, Miles Fidelman wrote: All I can speak for is observing some rather load and vociferous commentary, and agitation, from my BBN colleagues, many of whom were active in IETF, during the period where GSA and DoD were trying to foist OSI down everyone's throats. The technical a

Re: [dmarc-ietf] DMARC's purpose

2014-04-12 Thread Dave Crocker
On 4/12/2014 9:23 AM, Miles Fidelman wrote: 1. DMARC is NOT even close to an IETF standard 2. It has not been subject to any of the technical and operational vetting associated with the progression of a specification through the IETF standardization process 3. The means by which Yahoo has deploy

Re: [dmarc-ietf] DMARC's purpose

2014-04-12 Thread Miles Fidelman
Dave Crocker wrote: On 4/12/2014 8:52 AM, Miles Fidelman wrote: Dave Crocker wrote: That's governed by operations organizations, not the IETF. Well, yes and no. Your lengthy treatise does not appear to contain a specific proposal. So while the tutorial information is all well and good, how

Re: [dmarc-ietf] DMARC's purpose

2014-04-12 Thread Miles Fidelman
SM wrote: Hi Miles, At 05:29 12-04-2014, Miles Fidelman wrote: It does strike me that DMARC, which is currently an internet-draft, not even an RFC, is causing incredible disruption by its adoption, by a few very large players. Methinks this indicates a serious problem, and raises some questio

Re: [dmarc-ietf] DMARC's purpose

2014-04-12 Thread Dave Crocker
On 4/12/2014 8:52 AM, Miles Fidelman wrote: Dave Crocker wrote: That's governed by operations organizations, not the IETF. Well, yes and no. Your lengthy treatise does not appear to contain a specific proposal. So while the tutorial information is all well and good, how is it relevant to t

Re: [dmarc-ietf] DMARC's purpose

2014-04-12 Thread Miles Fidelman
Dave Crocker wrote: On 4/12/2014 8:17 AM, Miles Fidelman wrote: Dave Crocker wrote: On 4/12/2014 5:29 AM, Miles Fidelman wrote: 1. DMARC was developed by an ad hoc industry consortium. It is already deployed well enough to cover an estminated 60% of the world's email traffic. As such, it's s

Re: [dmarc-ietf] DMARC's purpose

2014-04-12 Thread SM
Hi Miles, At 05:29 12-04-2014, Miles Fidelman wrote: It does strike me that DMARC, which is currently an internet-draft, not even an RFC, is causing incredible disruption by its adoption, by a few very large players. Methinks this indicates a serious problem, and raises some questions about wh

Re: [dmarc-ietf] DMARC's purpose

2014-04-12 Thread Dave Crocker
On 4/12/2014 8:17 AM, Miles Fidelman wrote: Dave Crocker wrote: On 4/12/2014 5:29 AM, Miles Fidelman wrote: 1. DMARC was developed by an ad hoc industry consortium. It is already deployed well enough to cover an estminated 60% of the world's email traffic. As such, it's status with the IETF i

Re: [dmarc-ietf] DMARC's purpose

2014-04-12 Thread Miles Fidelman
Dave Crocker wrote: On 4/12/2014 5:29 AM, Miles Fidelman wrote: It does strike me that DMARC, which is currently an internet-draft, not even an RFC, is causing incredible disruption by its adoption, by a few very large players. Methinks this indicates a serious problem, and raises some questi

Re: [dmarc-ietf] DMARC's purpose

2014-04-12 Thread Kurt Roeckx
On Sat, Apr 12, 2014 at 07:53:46AM -0700, Dave Crocker wrote: > > 2. The spec is clear about how it works and what the implications are. The > issue with mailing lists is well-documented. I don't agree with this. Kurt ___ dmarc mailing list dmarc@i

Re: [dmarc-ietf] DMARC's purpose

2014-04-12 Thread Dave Crocker
On 4/12/2014 5:29 AM, Miles Fidelman wrote: It does strike me that DMARC, which is currently an internet-draft, not even an RFC, is causing incredible disruption by its adoption, by a few very large players. Methinks this indicates a serious problem, and raises some questions about what measur

Re: [dmarc-ietf] DMARC's purpose

2014-04-12 Thread Miles Fidelman
SM wrote: Hi Jim, At 08:47 10-04-2014, Jim Fenton wrote: More broadly: I'm not an expert on IETF publication criteria, but I hope that, especially given this confusion, controls are in place to protect against the publication of informational RFCs that might be harmful in some respect. It has

Re: [dmarc-ietf] Fwd: DMARC's purpose

2014-04-12 Thread SM
Hi Franck, At 13:35 10-04-2014, Franck Martin wrote: Some random thoughts [snip] -IETF recent focus is on pervasive monitoring, increasing security, prevent identity theft,... DMARC is a tool that helps, it is aligned with IETF recent goals. It is deployed, widely used, proven beneficia

Re: [dmarc-ietf] DMARC's purpose

2014-04-12 Thread SM
Hi Jim, At 08:47 10-04-2014, Jim Fenton wrote: More broadly: I'm not an expert on IETF publication criteria, but I hope that, especially given this confusion, controls are in place to protect against the publication of informational RFCs that might be harmful in some respect. It has been menti