Re: [dmarc-ietf] Reporting DMARC policy in A-R header fields

2019-08-01 Thread Stan Kalisch
On Thu, Aug 1, 2019, at 11:14 PM, John Levine wrote: > Catching up on my mail after a laptop disaster, ... > > In article <4600949.rz9u5RyGOV@l5580> you write: > >I think comments should be free-form. If we want data that can be machine > >parsed, we should specify it. > > > >I think the above wo

Re: [dmarc-ietf] New authentication method, DNSWL

2019-08-01 Thread Murray S. Kucherawy
On Thu, Aug 1, 2019 at 9:32 AM Alessandro Vesely wrote: > Let me narrate a use case. Courier-MTA can be configured to reject on SPF > -all > early in the SMTP dialogue, except if whitelisted. It writes SPF as well > as > dnswl results in the header, but does not interpret the policy.ip. > Downs

Re: [dmarc-ietf] Reporting DMARC policy in A-R header fields

2019-08-01 Thread John Levine
Catching up on my mail after a laptop disaster, ... In article <4600949.rz9u5RyGOV@l5580> you write: >I think comments should be free-form. If we want data that can be machine >parsed, we should specify it. > >I think the above works in ABNF terms. It's: > >Authentication-Results:" authserv-id;

[dmarc-ietf] Do is need a new ptype? Was Re: New authentication method, DNSWL

2019-08-01 Thread Scott Kitterman
Taking a step back, iprev uses the policy ptype. It's also based on local interpretation of DNS data. Why doesn't policy work for dnswl just like for iprev? Scott K ___ dmarc mailing list dmarc@ietf.org https://www.ietf.org/mailman/listinfo/dmarc

Re: [dmarc-ietf] New authentication method, DNSWL

2019-08-01 Thread Alessandro Vesely
On Thu 01/Aug/2019 07:27:10 +0200 Murray S. Kucherawy wrote: > On Wed, Jul 31, 2019 at 9:40 PM Scott Kitterman > wrote: > >> Can we discuss this choice? I know this has been implemented already, so >> I'm at least slightly reluctant to do the semi-standard lets rename >> existing stuff dance t

Re: [dmarc-ietf] Abolishing DMARC policy quarantine

2019-08-01 Thread Дилян Палаузов
Hello Hector, you state, that a domain owner can request p=quarantine over p=reject because of concers of false positives. Why shall one have concers about false positives, but will not be willing to fix them? I do repeat myself, but the way to fix the false positives is to introduce p=reject

Re: [dmarc-ietf] Abolishing DMARC policy quarantine

2019-08-01 Thread Hector Santos
On 7/31/2019 11:32 PM, Murray S. Kucherawy wrote: On Sun, Jul 28, 2019 at 6:37 AM Tim Wicinski mailto:tjw.i...@gmail.com>> wrote: From our end user point of view, I'm against abolishing quarantine, even with its current shortcomings. Why's that? -MSK, also hatless My opinion. How

Re: [dmarc-ietf] if policy quarantine will be kept

2019-08-01 Thread Дилян Палаузов
Hello, yes, it requires different receivers to know each other capabilities. Here a new proposed wording, if policy quarantine will be kept: Messages, subject to the quarantine policy, directed to a single recipient that does not support the concept of quarantining, can be either accepted and d

Re: [dmarc-ietf] Reporting DMARC policy in A-R header fields

2019-08-01 Thread Alessandro Vesely
On Wed 31/Jul/2019 12:46:00 +0200 Scott Kitterman wrote: >> Would it be possible to add a result of "quarantine"? Having dmarc=fail >> and dns.policy=quarantine leaves a good deal of interpretation to the MDA. >> If one could write dmarc=quarantine, a simple string search or regular >> expressi

Re: [dmarc-ietf] New authentication method, DNSWL

2019-08-01 Thread Murray S. Kucherawy
On Wed, Jul 31, 2019 at 10:27 PM Murray S. Kucherawy wrote: > > Appendix C of RFC8601 goes to some length to discourage the practice of > including all the details that were inputs to the evaluation, specifically > because the result of the evaluation at the border MTA is the only thing > that sh