Re: [dmarc-ietf] ARC vs p=quarantine

2020-12-20 Thread Benny Pedersen
On 2020-12-20 23:07, Michael Thomas wrote: On 12/20/20 2:01 PM, Benny Pedersen wrote: hopefully maillists stops dkim signing, its the incorrect place to solve breaking dkim Sorry, ARC is warmed over DKIM, and an experiment. DKIM is a full internet standard and expressly intended for lists,

Re: [dmarc-ietf] ARC vs p=quarantine

2020-12-20 Thread Michael Thomas
On 12/20/20 2:01 PM, Benny Pedersen wrote: hopefully maillists stops dkim signing, its the incorrect place to solve breaking dkim Sorry, ARC is warmed over DKIM, and an experiment. DKIM is a full internet standard and expressly intended for lists, etc to resign if they broke the

Re: [dmarc-ietf] ARC vs p=quarantine

2020-12-20 Thread Benny Pedersen
On 2020-12-20 19:13, John R Levine wrote: On Sun, 20 Dec 2020, Alessandro Vesely wrote: question is who steps up to provide such shared lists. Dnswl.org counts about 25K domains. I suppose one might try them but I expect most of them are not sending forwarded mail. only sending to

Re: [dmarc-ietf] p=quarantine

2020-12-20 Thread Douglas Foster
Like any security problem, we need to minimize false positives (desired mail being blocked) and false negatives (unwanted or malicious mail being allowed). ARC will hopefully address the false positives, but the false negative issue remains. The situation does not seem hopeless, but the topic

Re: [dmarc-ietf] Ticket #55 - Clarify legal and privacy implications of failure reports

2020-12-20 Thread John R Levine
On Fri 18/Dec/2020 21:05:43 +0100 John R Levine wrote: [ failure reports leak PII including forwarded recipients ] Are failure reports about forwarded messages still useful? If not so much, perhaps we could deplore them. There's no mechanical way to tell whether a message has been

Re: [dmarc-ietf] ARC vs p=quarantine

2020-12-20 Thread John R Levine
On Sun, 20 Dec 2020, Alessandro Vesely wrote: question is who steps up to provide such shared lists. Dnswl.org counts about 25K domains. I suppose one might try them but I expect most of them are not sending forwarded mail. I've finally gotten around to doing ARC checks in my SMTP daemon

Re: [dmarc-ietf] p=quarantine

2020-12-20 Thread Todd Herr
On Fri, Dec 18, 2020 at 4:55 PM Michael Thomas wrote: > > On 12/15/20 8:01 AM, Todd Herr wrote: > > > I'm not sure there's anything actionable about DMARC's policy values. > > you mean p=quarantine, or p=* in general? > Depending on the level of sophistication of a receiving email system, a

Re: [dmarc-ietf] Ticket #55 - Clarify legal and privacy implications of failure reports

2020-12-20 Thread Alessandro Vesely
On Fri 18/Dec/2020 21:05:43 +0100 John R Levine wrote: Info which is encoded in such a way that only the sender can understand rises no PII concern, IMHO.  A sender could cache sent messages and devise how to encode the corresponding filenames in DKIM selectors.  Reporting just the failed

Re: [dmarc-ietf] ARC vs p=quarantine

2020-12-20 Thread Alessandro Vesely
On Sat 19/Dec/2020 21:50:34 +0100 Dotzero wrote: On Sat, Dec 19, 2020 at 2:50 PM John Levine wrote: In article <1e61f7c4-c6d2-5dab-dfc7-f1fd740e1...@tana.it> you write: Now my tiny MX stores 115,225 domains total. And I have no idea how I could add a trust-ARC-seals boolean field to each

[dmarc-ietf] Messages from the dmarc list for the week ending Sun Dec 20 06:00:05 2020

2020-12-20 Thread John Levine
Count| Bytes | Who ++--- 10 (23.3%) | 61316 (13.9%) | Alessandro Vesely 6 (14.0%) | 29727 ( 6.7%) | John Levine 5 (11.6%) | 95589 (21.7%) | Douglas Foster 5 (11.6%) | 34737 ( 7.9%) | Michael Thomas 3 ( 7.0%) | 82453 (18.7%) |