ietf
[Top] [All Lists]

Re: WG Review: Domain-based Message Authentication, Reporting & Conformance (dmarc)x

2014-07-16 21:20:58
Dave Crocker wrote:
On 7/16/2014 6:15 PM, Martin Rex wrote:
   "Existing deployment of DMARC has demonstrated utility at internet
    scale"
I would propose to adjust this statement to better match reality.


DMARC is estimated to cover at least 60% of the world's mailboxes.

That's an interesting number, but how was it computed/counted,
and what does it mean in reality.

When the @yahoo.com reject policy had been set up, I checked whether
I could send fake @yahoo.com Email to my private German (F)reeMail
account and to my own company email account, and both Emails were
properly delivered to my Mailboxes.

So even mails "allegedly" From: mailboxes for which the domain
owner has published DMARC reject policy will be (properly, due to
legal requirement) dysfunctional in non-marginal areas of the internet.
The same applies to the DMARC report policy, for which processing
by telecommunication providers will also be illegal (a serious
criminal offense) in countries with strong protections of
fundamental human rights.


-Martin

<Prev in Thread] Current Thread [Next in Thread>