ietf
[Top] [All Lists]

Re: What I've been wondering about the DMARC problem

2014-04-17 05:04:30
On 16 Apr 2014, at 21:36, Brian E Carpenter 
<brian(_dot_)e(_dot_)carpenter(_at_)gmail(_dot_)com> wrote:
On 16/04/2014 18:58, Sabahattin Gucukoglu wrote:
On 15 Apr 2014, at 21:38, Brian E Carpenter 
<brian(_dot_)e(_dot_)carpenter(_at_)gmail(_dot_)com> wrote:
The mailman fix is worse than the disease. I think the .INVALID fix is
much better, because Reply-all will still work.

Reply-all should still work with the Mailman fix; 

It doesn't work *properly*. Firstly, this message wouldn't be sent
to you with CC to the list, which is the correct semantic.
If you weren't a subscriber, you would never see it. Secondly,

Sorry, but I appear to be confused.

The Reply-To: field is adjusted to be the author's address, on a discussion 
list like this where replies go back to the authors.  Just in case we're 
talking across purposes somehow and to avoid all doubt, the fix we are talking 
about is described here:
http://www.dmarc.org/supplemental/mailman-project-mlm-dmarc-reqs.html

Unless your MUA is doing something very unusual, and some do, then pressing 
"Reply all" should produce a message addressed to me, with a CC that contains 
the remainder of the recipient addresses.  The From: is completely irrelevant.

I'm just waiting to be told that I've missed the obvious. :)

Now, FWIW, a better way is as has been suggested here, namely to synthesise 
addresses for each subscriber.  That's how I'd do it: every mailing list post 
has its From: rewritten, like:
ietf-resend+brian.e.carpenter=gmail(_dot_)com(_at_)ietf(_dot_)org

That address remails to you, first checking that a subscriber of the list is 
recognised.  In the process, it performs the same transformation on the From: 
field of the message, so as to pass SPF alignment.  It is hoped that your 
interlocutor happens to be on the list, also, or that you are still on the list 
when he is trying to contact you.

the first line above would read:

On 16/04/2014 18:58, IETF discussion list wrote:

which is untrue.

It isn't necessary to change the personal name.  Some MUAs may very cleverly 
add one in the absence of one, or store it in an address book, though, 
incorrectly.  With the resend method above this issue is less problematic; 
furthermore the list software can add "(via listname)" to make the distinction 
less confusing.

No, none of these suggestions are perfect.  I'm not looking for a perfect 
solution though, I'm looking for one that works, for now.  Throwing people off 
my lists *is not* an option.

Cheers,
Sabahattin