Re: [dmarc-ietf] Girl Scout troops vs MLM problems (#70)

2022-08-10 Thread Alessandro Vesely
On Wed 10/Aug/2022 06:14:04 +0200 Murray S. Kucherawy wrote: On Tue, Aug 9, 2022 at 2:01 AM Alessandro Vesely wrote: Because there are more ways for a forwarder to change a message than you or I can describe. That critic applies to my draft, not to unmunging in general. The only change we

Re: [dmarc-ietf] Collecting message metadata, was Time to work on failure reporting

2022-08-10 Thread Alessandro Vesely
On Wed 10/Aug/2022 06:45:04 +0200 Scott Kitterman wrote: On Tuesday, August 9, 2022 11:57:53 PM EDT Murray S. Kucherawy wrote: On Tue, Aug 9, 2022 at 7:54 AM Dotzero wrote: When "we" (dmarc.org team) originally came up with DMARC, the goal was to take what was in essence a private club to an o

Re: [dmarc-ietf] Girl Scout troops vs MLM problems (#70)

2022-08-10 Thread Alessandro Vesely
On Wed 10/Aug/2022 06:39:47 +0200 Scott Kitterman wrote: ARC's added value is only meaningful for receivers whose reputation system is so sophisticated that that info matters. That is, for global mailbox providers. The only point I would add is that "reputation system is so sophisticated th

Re: [dmarc-ietf] Girl Scout troops vs MLM problems (#70)

2022-08-10 Thread Barry Leiba
> This list saves From: in X-Original-From:. It'd cost nothing to switch to > Author: instead. The arc list, however, saves it by appending to Reply-To:. > The point is to agree on a field name. Author: seems the most promising one. > > Now, everybody complains about how From: munging ruined the

Re: [dmarc-ietf] Girl Scout troops vs MLM problems (#70)

2022-08-10 Thread Douglas Foster
To avoid munging, MLMs have a double problem: (1) the evaluator must find an alternative to DMARC for concluding that the message is "not untrusted", and (2) the MLM must know that this trust has been granted. If (2) is known for some recipients but not others, the MLM must be able to make mungi

Re: [dmarc-ietf] Girl Scout troops vs MLM problems (#70)

2022-08-10 Thread John R Levine
On Wed, 10 Aug 2022, Barry Leiba wrote: Yeh, I have to take serious issue with this: It's not a "tantrum" to say that it's not reasonable to require all mailing list software and every mailing list in the world to change what's worked for decades in order to work around a problem caused by use of

Re: [dmarc-ietf] Collecting message metadata, was Time to work on failure reporting

2022-08-10 Thread John R Levine
On Tue, 9 Aug 2022, Murray S. Kucherawy wrote: I agree with John, I think, that the amount of time we should spend improving failure reporting should be proportional to how much it's used, or how much the community is asking us to do so. ... My small mail system gets failure reports every day,

Re: [dmarc-ietf] Girl Scout troops vs MLM problems (#70)

2022-08-10 Thread Barry Leiba
Indeed, a problem with munging, or with any other workaround that mailing-list software might do, is that the problem happens at subscribers' domains, not at the mailing-list domain, and the mailing list software has no idea what's going to happen on the subscriber's side. It can only see that the

Re: [dmarc-ietf] Collecting message metadata, was Time to work on failure reporting

2022-08-10 Thread Barry Leiba
Chair here... > On Tue, 9 Aug 2022, Murray S. Kucherawy wrote: > > I agree with John, I think, that the amount of time we should spend > > improving failure reporting should be proportional to how much it's used, > > or how much the community is asking us to do so. ... > > My small mail system get

Re: [dmarc-ietf] Girl Scout troops vs MLM problems (#70)

2022-08-10 Thread Douglas Foster
"Breaking long-standing practice" is not the fault of the domain owner policy, it is the fault of DMARC being oversold and the DMARC result being applied by the evaluator in a way that undermines the interest of his own recipients. Consider the possible causes of DMARC FAIL: Failures that can be

Re: [dmarc-ietf] Girl Scout troops vs MLM problems (#70)

2022-08-10 Thread Douglas Foster
Your expectations are very different from mine. 1) MLMs have a releationship with their subscribers, and could collect data for conditional munging, if they chose to do so and their software provided the necessary capability. 2) I don't see how "wide deployment" can ever be determined without a d

Re: [dmarc-ietf] Girl Scout troops vs MLM problems (#70)

2022-08-10 Thread Murray S. Kucherawy
On Wed, Aug 10, 2022 at 10:44 AM Douglas Foster < dougfoster.emailstanda...@gmail.com> wrote: > "Breaking long-standing practice" is not the fault of the domain owner > policy, it is the fault of DMARC being oversold and the DMARC result being > applied by the evaluator in a way that undermines th