Re: [dmarc-ietf] non-mailing list use case for differing header domains

2020-08-07 Thread Dave Crocker
On 8/7/2020 7:32 PM, John Levine wrote: I would be interested to better undertstand the meaning of "need" here. It is my impression that most people vastly overestimate how much of a phish target they are. Paypal and big banks certainly are, other places, a lot less so. I suspect the calculus

Re: [dmarc-ietf] non-mailing list use case for differing header domains

2020-08-07 Thread John Levine
In article <78fd8b26-0bed-ac36-842d-a851ec04d...@wisc.edu> you write: >On 8/7/20 2:12 PM, John Levine wrote: >> My guess is that MIT figured Microsoft will host this for free, that's >> great, totally unaware that some of its users' mail would silently >> break. > >Customers of Microsoft don't like

Re: [dmarc-ietf] non-mailing list use case for differing header domains

2020-08-07 Thread John Levine
In article <10c441a53dec4277a3153ed8d89d3...@bayviewphysicians.com> you write: >-=-=-=-=-=- > >Murray, I have most recently used this link at AOL/Yahoo: >https://postmaster.verizonmedia.com/sender-request > >I have considered using the more complete "Complaint Feedback Loop", >https://postmast

Re: [dmarc-ietf] non-mailing list use case for differing header domains

2020-08-07 Thread Douglas E. Foster
Murray, I have most recently used this link at AOL/Yahoo: https://postmaster.verizonmedia.com/sender-request I have considered using the more complete "Complaint Feedback Loop", https://postmaster.verizonmedia.com/cfl-request but have never completed the process. Maybe they are the last to

Re: [dmarc-ietf] non-mailing list use case for differing header domains

2020-08-07 Thread Jesse Thompson
On 8/7/20 2:12 PM, John Levine wrote: > In article > > you write: >> I feel like what is happening sometimes is that central university IT is >> trying to drag their whole institutions into a >> more secure posture before anybody in a position to stop them fully >> understands what's going on

Re: [dmarc-ietf] non-mailing list use case for differing header domains

2020-08-07 Thread Murray S. Kucherawy
On Sun, Aug 2, 2020 at 5:44 PM Douglas E. Foster < fost...@bayviewphysicians.com> wrote: > Murray took server too literally. I have expressed before that a system > could do a sender authentication lookup on List-ID as easily as on From. > In this respect, it is similar to Dave's proposal, witho

Re: [dmarc-ietf] non-mailing list use case for differing header domains

2020-08-07 Thread John Levine
In article you write: >I feel like what is happening sometimes is that central university IT is >trying to drag their whole institutions into a >more secure posture before anybody in a position to stop them fully >understands what's going on lest they be told to >stop because it might make thi

Re: [dmarc-ietf] non-mailing list use case for differing header domains

2020-08-07 Thread Autumn Tyr-Salvia
What I find very interesting about this email from Jesse, and Mike's response is that I hear these words coming from two very different experiences of deploying DMARC. In my role doing onboarding at Agari, I have worked with many different organizations on their DMARC projects. I have worked wi