Re: [dmarc-ietf] Improving feedback using additional status codes

2019-05-25 Thread Dilyan Palauzov
Hello Douglas, RFC 7372 describes these status codes. To my knowledge these are not used. SPF helps on DMARC with MTAs, which cannot include DKIM signature under circumstances (e.g in bounces). In all othercases SPF does not provide added value to DKIM. If you want errors about failed DK

Re: [dmarc-ietf] Is there any recommendation to send DMARC message-specific failure reports FROM:<> ?

2019-05-25 Thread Дилян Палаузов
Hello Grant, it is a misconfiguration, but it still creates a mail loop for the site, that is not misconfigured. To what I can say the emails are accepted at SMTP time and then bounced. I not asking to modify DMARC, but to recommend sending message-specific, individual failure reports FROM: <

Re: [dmarc-ietf] Is there any recommendation to send DMARC message-specific failure reports FROM:<> ?

2019-05-25 Thread Grant Taylor
On 5/25/19 11:09 PM, Dilyan Palauzov wrote: Emails to postmas...@modernwebsite.pl are answered with “Undelivered Mail Returned to Sender”.  The answers do not align to the DMARC policy reject, so a new message-specific failure repot is sent. Are the reports that you are sending being accepted

Re: [dmarc-ietf] Is there any recommendation to send DMARC message-specific failure reports FROM:<> ?

2019-05-25 Thread Dilyan Palauzov
Hello John, in case of modernwebsite.pl: DNS TXT _dmarc.modernwebsite.pl is "v=DMARC1; p=reject; pct=100; rua=mailto:postmas...@modernwebsite.pl; ruf=mailto:postmas...@modernwebsite.pl; aspf=s;adkim=s;" Emails to postmas...@modernwebsite.pl are answered with “Undelivered Mail Returned to

Re: [dmarc-ietf] Improving feedback using additional status codes

2019-05-25 Thread John Levine
In article <1ee3bd2ebd204746a0d0641e186ca...@bayviewphysicians.com> you write: > PROPOSAL > > When a recipient detects an SPF or DKIM problem, it can provide immediate >feedback to the sender with message status codes. No. If people want status reports, they'll ask for them. On the other hand

Re: [dmarc-ietf] Is there any recommendation to send DMARC message-specific failure reports FROM:<> ?

2019-05-25 Thread John Levine
In article <20190525183556.horde.zvg1bnsybvs_enkzpkjl...@webmail.aegee.org> you write: >Consider this scenario: an email from a domain, with DMARC policy >“p=reject; ruf=postmaster@domain” fails validation. A >message-specific report is sent to postmaster@domain. The report is >bounced (or

Re: [dmarc-ietf] DMARCbis issue: Separating reporting and policy

2019-05-25 Thread John R Levine
On Sat, 25 May 2019, Dave Crocker wrote: 2. Along similar lines, I get confused when I hear that x% of {some set of domains} has "deployed DMARC". What does that mean? Have they Ultimately, you are asking marketing questions, not technical ones. Right. It's easy enough to imagine soemone han

Re: [dmarc-ietf] DMARCbis issue: Separating reporting and policy

2019-05-25 Thread Dave Crocker
On 5/24/2019 10:35 AM, Jim Fenton wrote: I hope this isn't devolving into a "we can't make any changes, because it might break something" argument. We are quite a long ways from that. In fact we are in the "please make a case for their being a serious problem that needs fixing" argument, com

[dmarc-ietf] Improving feedback using additional status codes

2019-05-25 Thread Douglas E. Foster
The genius of DMARC, as compared to DKIM and SPF alone, is the feedback component. Unfortunately, sender authentication remains challenged by these issues: Limited deployment of DMARC feedback between senders and receivers. Significant levels of SPF and DKIM validation e

[dmarc-ietf] Is there any recommendation to send DMARC message-specific failure reports FROM:<> ?

2019-05-25 Thread Dilyan Palauzov
Hello, is there already any recommendation from IETF to send DMARC message-specific failure individual (non-aggregate) reports with FROM:<> (or NOTIFY=NEVER)? Consider this scenario: an email from a domain, with DMARC policy “p=reject; ruf=postmaster@domain” fails validation. A message